fooman/tcpdf

Release historycaution

This is a mature package with 132 releases since May 2015, but only one release appeared in the last 12 months. That limited recent cadence is consistent with the stated support-only status and lowers maintenance confidence.

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers in the last 3 months. The latest push aligns with the release date, but there is little evidence of ongoing maintenance beyond that release.

Repo popularitycaution

The linked repository has only 1 star, 2 forks, and no watchers, providing little community evidence. Organization ownership and the package's long release history partly compensate, so this is supporting caution rather than a severe risk.

Repo toolingcaution

Composer is used for builds, but no security scanning tools were detected. This is a hygiene gap, not evidence that the package is unsafe, and other repository evidence shows a structured project.

Security policycaution

The repository has no SECURITY.md or other security policy. That reduces transparency for reporting and handling defects, especially for a library likely to process document content.