setasign/setapdf-signer-addon-aws-kms
The repository is current, clearly matches the package, and has two active recent contributors. Its license and release notes help, but the missing security policy and limited release history reduce confidence in long-term adoption.
45%
Total Score
100
100
78
75
Health Score Breakdown
The package is reported to borrow the identity of the much more established setasign/fpdi, with borrows_lookalike_identity true. Although artifact overlap is 0.0 and the README does not identify it as a fork, this is a severe adoption warning because consumers may have intended the lookalike package.
The package has existed for about 5 years and 8 months but has only 4 releases, with a median interval of about 505 days and just 1 release in the last 12 months. The latest release is recent, which partly offsets the otherwise sparse cadence.
The repository uses Composer, appropriate for this PHP package, but no security scanning tools were detected. The missing scanning is a hygiene limitation rather than evidence of abandonment.
The repository has no SECURITY.md or other detected security policy. This weakens vulnerability-reporting transparency, though it does not by itself show that maintenance has stopped.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
 Setasign GmbH & Co. KG |
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 aws/aws-sdk-php Version ^3.368 | — | — |
setasign/setapdf-signer Version ^2.47 | — | — |
Weekly Downloads
Info
- Last Published
- 8 months ago
- Created
- 5 years ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.