moogento/mpdf

Lifecycle scriptscaution

The package runs a post-install-cmd script, adding install-time behavior that developers must review. No dangerous workflow evidence is present to offset this concern, so it is a modest supply-chain hygiene risk.

Release historycaution

The package is mature, with 14 releases over roughly 3 years, but it has had no release in the last 12 months. The long pause lowers confidence in ongoing maintenance despite the established history.

Repo commit activitycaution

There were zero commits and zero active maintainers in the last 3 months, consistent with a project that is currently inactive. The recent release history provides some maturity, but does not compensate for the present maintenance pause.

Repo popularitycaution

The repository reports zero stars and zero forks, with only two watchers. Popularity is supporting evidence rather than a verdict, but these very low engagement levels provide little independent evidence of active community support.

Repo toolingcaution

The repository uses Composer for builds, which fits the PHP package ecosystem, but it has no detected security scanning tools. The missing scanning is a maintenance and transparency gap, though not by itself a severe risk.