magestore/pdfinvoiceplus-lib
The package includes a README, changelog, release notes, and no install-time scripts; its repository is also correctly named and organization-backed. However, the artifact identifies GPL-2.0 while the manifest declares OSL-3.0 and AFL-3.0, and no release or repository activity is visible since 2016.
42%
Total Score
75
60
75
Health Score Breakdown
This is the package's only release, published over 10 years ago, with no releases in the last 12 months. That is strong evidence of abandonment despite the stable version.
The manifest declares OSL-3.0 and AFL-3.0, but the artifact license file is recognised as GPL-2.0. The mismatch creates a material licensing and transparency concern.
Four issues remain open, with no issues or pull requests opened or closed in the last month. Combined with the old last push, this suggests the project is not actively maintained.
The repository is not archived, which avoids the strongest abandonment signal, but it was last pushed over 10 years ago. The lack of recent source activity still lowers maintenance confidence.
The repository has no security policy. This is a transparency gap for reporting and handling vulnerabilities, although it is less serious than the stale release history.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
No maintainer information available.
Direct Dependencies
No direct dependencies.
Weekly Downloads
Info
- Last Published
- 10 years ago
- Created
- 10 years ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.