Usable with caveats: the package is licensed, documented, and not deprecated or archived, but the assessed release is over seven years old and recent repository activity is absent. Depend on it only if its older dependency and framework support remain acceptable for your project.
55%
Total Score
50
50
78
83
The package has 23 releases since 2014, but its latest registry release was over seven years ago and there were no releases in the last 12 months. This substantially raises compatibility and abandonment concerns.
Three runtime dependencies are declared, including PhpSpreadsheet and Yii-related packages. This is a manageable dependency surface, though the old release means their compatibility should be checked explicitly.
Only one registry account has publish access. This is a thin publishing base for a user-backed project and increases continuity risk, although registry access alone does not prove that only one person contributes.
The registry namespace and repository owner match, but the owner is an individual account rather than an organization. This provides ownership consistency without adding organizational backing.
The repository recorded no commits and no active maintainers in the last three months. Although it was pushed in 2025, the provided activity data does not show ongoing development.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
kartik-v/yii2-mpdf Version >=1.0 | — | — |
kartik-v/yii2-dynagrid Version >=1.4.5 | — | — |
phpoffice/phpspreadsheet Version >=1.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.