The stable major version, modest dependency set, and lack of registry deprecation provide some reassurance. However, the last release was over five years ago, and the repository could not be found, leaving maintenance and provenance unverified.
40%
Total Score
100
67
The package has no release in over five years despite a long history, which is strong evidence of abandonment risk for a dependency. Its 12-release history shows prior maturity but does not compensate for the prolonged inactivity.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
tecnickcom/tcpdf Version ^6.2 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.