A library
62%
Total Score
50
94
100
The package has 11 releases since September 2023, but its latest registry release was about 20 months ago and there were no releases in the last 12 months. This indicates meaningful maintenance slowdown.
The repository recorded no commits and had no active maintainers in the last 3 months. Although it was pushed recently according to the repository status, the measured development activity remains low.
All 21 analyzed action references are unpinned, and the workflow-run changelog workflow checks out untrusted code, creating supply-chain hygiene risk. The two cache-poisoning findings are low confidence and therefore add little weight on their own.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
mpdf/mpdf Version ^8 | — | — |
dompdf/dompdf Version ^2|^3 | — | — |
horstoeko/zugferd Version ^1 | — | — |
league/commonmark Version ^1|^2 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.