durcap2011/engipdf

Usable with caveats: the release is clearly packaged, licensed, and actively backed, but the project is only one day old and has a single contributor with no security policy. Depend on it only if you can accept limited evidence of long-term maintenance.

Latest v1.0.1

Packagist

62%

Total Score

Maintainer Stability

Dependencies

100

Maturity

Supply Chain

Health Score Breakdown

Maintainers

Only one registry account has publish access. This is a limited publishing base, and unlike an organization-backed project there is no provided organizational context to compensate for that concentration.

Release history

The package is only 1 day old with two releases, so there is not enough history to demonstrate sustained maintenance or reliability over time.

Repo bus factor

All recent repository commits come from one contributor, leaving maintenance dependent on a single person. The repository is user-owned, so no organization backing is provided to offset that concentration.

Repo commit activity

There was one commit by one active maintainer in the last 3 months, with the latest push occurring recently. This supports current activity but is too little history to establish durable maintenance.

Repo tooling

Composer is used as a build tool, but no security-scanning tool is detected. The build setup is present, while security-process transparency remains limited.