It has tests, a changelog, a clear license, matching source, and Dependabot coverage. Its broad dependency set and absent security policy increase maintenance and review burden.
56%
Total Score
67
50
94
75
The release declares 25 runtime dependencies, including several libraries and PHP extensions, creating a relatively broad maintenance and compatibility surface.
The package has 31 releases, but none in the last 12 months; its latest release was over 5 years ago, which is a meaningful maintenance concern.
There were no commits and no active maintainers in the last 3 months, reinforcing the evidence that maintenance has stopped.
Six issues remain open and there were no new or closed issues or pull requests in the last month, consistent with a project receiving little current attention.
The repository has no security policy, leaving disclosure and response expectations undocumented; this is a transparency gap, though not severe on its own.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
itbz/fpdf Version ^1.7 | — | — |
iio/libmergepdf Version ^3.0 | — | — |
smalot/pdfparser Version 0.14.0 | — | — |
shardj/zf1-future Version ^1.16 | — | — |
phpoffice/phpexcel Version dev-mpdfCompatibilityFix@dev | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.