The MIT license, included tests, matching repository, and organization backing provide useful transparency. Composer is used for builds, but no security scanning or security policy is present, limiting assurance for a package with no demonstrated maintenance after release.
58%
Total Score
75
83
75
The package has only one release, published 466 days ago, with no releases in the last 12 months. That provides little evidence of sustained maintenance.
The repository recorded zero commits and zero active maintainers in the last three months. The repository is not archived, but current maintenance capacity is not demonstrated.
The repository uses Composer, which fits the package ecosystem, but no security scanning tools are reported. This is a modest transparency and assurance gap.
No security policy is present in the repository. That weakens vulnerability-reporting transparency, although it is not by itself evidence that the package is unsafe.
We didn't find any vulnerabilities for this package.
No maintainer information available.
| Dependency | Last Release | Score |
|---|---|---|
fawno/fpdf Version ^1.86 | — | — |
setasign/fpdi Version ^2.6 | — | — |
cakephp/cakephp Version ^4.3 | — | — |
fawno/fawno-helpers Version ^0.0.1 | — | — |
holt59/cakephp4-bootstrap-helpers Version v3.x-dev | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.