inquid/yii2-fpdf

Licensecaution

The release includes MIT licensing in its manifest and license files, so it is clearly licensed. The artifact also identifies MIT-0 alongside MIT, which is worth checking when distributing the bundled code because the declaration does not explicitly cover both.

Release historycaution

The latest release was September 21, 2023, with no releases in the following 12 months of collected history. The five-release history shows an established but now inactive package.

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers in the last three months, consistent with the long gap since the latest release. This is a meaningful abandonment concern for a library dependency.

Repo toolingcaution

Composer build tooling is present, but no security scanning tools were detected. The build setup is appropriate for the package, while the missing scanning is a modest hygiene concern.

Security policycaution

The linked repository has no security policy, leaving no documented route for reporting or handling vulnerabilities. This is a transparency and maintenance gap, though it does not by itself make the package unfit.