riccardowebco/tcpdf

Its source repository is not archived, and the package has a clear license, README, and changelog. The single-maintainer project has no recent activity or security scanning, so long-term fixes are uncertain.

Latest 6.3.0

Packagist

42%

Total Score

Maintainer Stability

Dependencies

100

Maturity

Supply Chain

Health Score Breakdown

Release history

The latest release was published in April 2015, with no releases in the last 12 months despite the package being over 11 years old. This is strong evidence of abandonment risk.

Repo commit activity

There were zero commits and zero active maintainers in the last three months, consistent with the release history and indicating that fixes are unlikely to arrive promptly.

Project backing

The repository is owned by an individual account rather than an organization, so the single registry maintainer does not benefit from visible organizational backing.

Repo popularity

The repository has zero stars and forks and only one watcher. Popularity is supporting evidence rather than decisive, but these counters provide little evidence of an active community.

Repo tooling

Composer is used for builds, but no security scanning tools are configured. The missing security tooling is a transparency and maintenance concern for a library with no recent activity.