einhasad/mpdf-light

Lifecycle scriptscaution

A post-install-cmd script runs during installation. This adds some installation complexity and supply-chain exposure, although the available signals do not show that it is harmful.

Maintainerscaution

Only one registry account has publish access, which creates a thin publishing base. The repository is organization-owned, making the short registry list less concerning than it would be for an independently owned project.

Release historycaution

The package has only one release, published about 23 months ago, with no releases in the last 12 months. That limited history and lack of ongoing releases reduce confidence in maintenance.

Repo commit activitycaution

There were zero commits and zero active maintainers in the last three months. Combined with the single-release history, this is the strongest evidence of reduced maintenance capacity.

Repo popularitycaution

The repository has one star, no forks, and no watchers. Popularity is only supporting evidence, but these very low figures provide little evidence of a broad user or contributor community.