rospdf/pdf-php
The package includes tests, a clear MIT license, and only one runtime dependency. Its repository is organized and backed by an organization, but ongoing maintenance and workflow pinning need attention.
55%
Total Score
83
100
88
67
Health Score Breakdown
Composer post-install and post-update scripts run during dependency operations, adding execution surface and requiring more trust than a package without lifecycle hooks.
The package has 47 releases since May 2016, but its latest release was April 20, 2023 and it had no releases in the last 12 months, indicating prolonged release inactivity.
There were zero commits and zero active maintainers in the last three months, which is a meaningful maintenance and abandonment concern for a library release.
Composer build tooling is present, but no security-scanning tools were detected, leaving a repository hygiene gap.
The repository has no security policy, reducing transparency about vulnerability reporting and maintainer response expectations.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
 Ole Koeckemann |
| Lars Olesen |
| Sune Jensen |
| Nicola Asuni |
| Wayne Munro |
Direct Dependencies
No direct dependencies.
Weekly Downloads
Info
- Last Published
- 3 years ago
- Created
- 10 years ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.