kba-team/legacy-mpdf
The GPL-2.0 license, small runtime dependency set, and matching repository provide useful transparency. Maintenance and security response capacity are not credible for a dependency that has stopped releasing and whose source is archived.
12%
Total Score
50
100
50
50
Health Score Breakdown
Packagist marks the entire package as abandoned, with no replacement named. This is a direct warning that developers should not start new dependencies on it.
The package has only four releases, none in the last 12 months, and its latest registry release was on February 4, 2019. This indicates long-term release inactivity.
The repository had zero commits and zero active maintainers in the last three months. Together with its archived state, this shows no current maintenance capacity.
The linked repository is archived, and its last push was on March 5, 2021. An archived source repository is a severe abandonment risk for a library dependency.
There were no new or closed issues or pull requests in the last month. This is consistent with an inactive project, although the open issue counts are unknown.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
 Ian Back |
Direct Dependencies
No direct dependencies.
Weekly Downloads
Info
- Last Published
- 7 years ago
- Created
- 8 years ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.