setasign/fpdi-fpdf
Unfit to use: the package is deprecated and its source repository is archived, with no releases or commits for about six years. Its licensing and repository identity are clear, but they do not offset the abandonment risk.
12%
Total Score
50
50
Health Score Breakdown
Packagist marks the entire package as abandoned, with no replacement specified. This is a severe adoption risk for a dependency even though the specific release is otherwise identifiable.
The package has made no release in about six years, despite having 11 releases overall. That long gap supports the conclusion that maintenance has stopped.
The repository recorded zero commits and zero active maintainers during the last three months, consistent with its archived status and lack of ongoing maintenance.
The linked Setasign repository is archived and was last pushed about six years ago, indicating the project is no longer actively maintained.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
 Jan Slabon |
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 setasign/fpdf Version ^1.8.2 | — | — |
setasign/fpdi Version ^2.3 | — | — |
Weekly Downloads
Info
- Last Published
- 6 years ago
- Created
- 11 years ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.