Regular releases over the last year provide useful evidence of ongoing maintenance. The small, organization-backed project has no recent three-month commits or security policy, so pinning this pre-1.0 release deserves care. MIT licensing and tests are positives.
67%
Total Score
75
88
50
The repository had zero commits and zero active maintainers in the last three months. Although it was pushed recently and releases remain active, this short-term inactivity lowers maintenance confidence.
The repository has zero stars, forks, and watchers, offering no community adoption signal. Popularity is supporting evidence only, so this is a modest concern rather than a decisive risk.
The repository has no security policy, leaving vulnerability reporting and response expectations undocumented for a package that handles certificates and municipal service integrations.
Version 0.7 is not a prerelease, but it remains before a stable 1.0 release, so compatibility expectations are less certain.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
mpdf/mpdf Version ^8.1 | — | — |
nesbot/carbon Version ^3.10 | — | — |
league/flysystem Version ^1.1 || ^3.0 | — | — |
symfony/serializer Version ^6.2 | — | — |
symfony/property-access Version ^6.2 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.