joaozica/mpdf

Release historydanger

The package has had 51 releases but none in the last five years; its latest registry release was about 5 years ago. That long pause is strong evidence of abandonment risk for a dependency.

Lifecycle scriptscaution

The package runs a post-install-cmd script during installation. Install-time code increases dependency and supply-chain exposure compared with a package that has no lifecycle scripts, although this alone is not severe.

Repo commit activitycaution

The repository recorded 0 commits and 0 active maintainers in the last 3 months, consistent with the release history showing no releases in that period. This materially reduces confidence that defects will be addressed.

Repo issue activitycaution

There were no new or closed issues or pull requests in the last month, and no pull requests were open. With no recent commits or releases, the lack of activity reinforces the maintenance concern.

Repo popularitycaution

The linked repository has 0 stars, forks, and watchers. Popularity is only supporting evidence, but these counters provide no visible community or adoption buffer for an inactive package.