kba-team/mpdf

Lifecycle scriptscaution

A post-install command runs during installation, adding execution during dependency setup. This is a supply-chain hygiene concern, although the signal does not show what the command does.

Release historycaution

The package has 71 releases but none in the last 12 months, and its latest release was about 14 months ago. This strongly raises abandonment risk despite the historically high release count.

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers in the last three months, consistent with the package having been inactive for about 14 months. This is a material abandonment concern.

Repo popularitycaution

The repository has zero stars, forks, and watchers. Popularity is only supporting evidence, but these values provide no additional confidence in the project's maturity or continuity.

Repo toolingcaution

Composer build tooling is present, but no security scanning tools were detected. The missing scanning is a moderate transparency gap rather than evidence that the release is unsafe.