machinateur/php-qpdf-ffi

Project backingcaution

The package and repository are owned by the same individual account, providing direct ownership but no organizational backing to offset the thin maintainer base.

Release historycaution

Only two releases have appeared, with none in the last 12 months and roughly 17 months since version 1.1.0. This is a meaningful maintenance concern, though the package is still relatively small and has not been deprecated.

Repo commit activitycaution

There were no commits and no active maintainers in the last three months. Combined with the long release gap, this lowers confidence in ongoing maintenance.

Repo toolingcaution

Composer is used for build or package management, but no security scanning tools are present. The missing scanner is a hygiene limitation rather than evidence of abandonment by itself.

Security policycaution

The repository has no security policy, leaving vulnerability reporting and response expectations unspecified.