streammarket/tcpdf

Licensecaution

The package declares LGPL-3.0-or-later and includes license files, but artifact detection also found GPL-3.0 text. This may reflect bundled components, yet the combined licensing warrants clarification for redistribution.

Maintainerscaution

Only one registry account has publishing access. That is a modest resilience concern, though access records alone do not establish who actively maintains the source project.

Release historycaution

This is the only registry release, published nearly two years ago, with no releases in the last 12 months. That weakens evidence of active maintenance, although the linked repository was pushed more recently.

Repo commit activitycaution

The repository had zero commits and zero active maintainers in the last three months. This is a concrete sign of currently limited maintenance, partly offset by the more recent push recorded for the repository.

Security policycaution

No security policy is present in the repository, leaving vulnerability reporting and response expectations undocumented.