garsaud/tcpdf_using_streams

Release historydanger

This is the package's only release, published about three years and seven months ago, with no releases in the last 12 months. That strongly limits evidence of ongoing maintenance.

Licensecaution

The package declares LGPL-3.0-only and includes license files, but artifact detection also identifies GPL-3.0. The detected additional license creates some uncertainty about which bundled files the declaration covers.

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers in the last three months, consistent with the package's long release gap and raising abandonment risk.

Security policycaution

The repository has no security policy and no security-scanning tools. For a library intended for dependency use, this weakens vulnerability-reporting and review transparency.

Workflow auditcaution

Both workflows were analyzed successfully with no detected dangerous findings, but all 13 action references are unpinned. This leaves avoidable build-integrity exposure despite the otherwise clean audit.