The project has shipped frequently and includes tests, release notes, and security tooling. Maintenance is concentrated in one contributor, with only one commit in three months and twelve open pull requests; workflow references are also unpinned.
58%
Total Score
50
50
100
75
The package declares 18 runtime dependencies spanning authentication, email, storage, imaging, and messaging, creating a comparatively broad dependency surface for consumers to maintain.
The repository is owned by an individual user rather than an organization, so the one-person contributor concentration is not compensated by visible organizational backing.
One contributor made 100% of the commits in the last three months, leaving no demonstrated backup maintainer for ongoing development.
Only one commit was recorded in the last three months, which is weak activity for a package that published many releases and leaves maintenance responsiveness uncertain.
There are 12 open pull requests but no new or merged pull requests in the last month, suggesting unresolved contribution backlog and limited recent review activity.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
mpdf/mpdf Version ^8.3 | — | — |
dompdf/dompdf Version ^3.1 | — | — |
eftec/bladeone Version ^4.18 | — | — |
symfony/mailer Version ^7.3 | — | — |
monolog/monolog Version ^3.9 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.