It has a clear MIT license, practical documentation, and organization backing. The tiny user base and absent security tooling add little evidence that maintenance will resume.
42%
Total Score
50
75
75
The package has had no registry release since October 2021, despite being nearly five years old. This is strong evidence of abandonment risk.
The repository recorded zero commits and zero active maintainers in the last three months, with its last push in January 2024. Current maintenance capacity appears very weak.
There has been no issue or pull request activity in the last month, and one issue remains open. This supports the broader evidence of low ongoing maintenance.
The repository has zero stars, zero watchers, and one fork. Popularity is not decisive, but these figures provide little supporting evidence of active community use.
The repository has no security policy, leaving vulnerability reporting and response expectations undocumented. This is a transparency gap, though it is less serious than the maintenance signals.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
sasedev/mpdf-bundle Version ^2.0.0 | — | — |
phpoffice/phpspreadsheet Version ^1.18 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.