winify/dompdf-loadr

Risky to adopt: this small Composer plugin has had no release or repository activity since January 2016. Its coherent package contents and stable version help, but the decade-long inactivity, minimal documentation, and repository/package identity mismatch make maintenance and provenance concerns substantial.

Latest 1.0.3

Packagist

38%

Total Score

Maintainer Stability

Dependencies

100

Maturity

Supply Chain

Health Score Breakdown

Release history

The package has 4 releases, but its latest release was over 10 years ago and it has had no releases in the last 12 months. That long period without updates is a strong abandonment concern for a dependency.

Repo package mention

The repository name does not match the package name and its README does not mention the package. That raises a provenance concern because the linked repository may not clearly establish ownership of this release.

Repository archived

The linked repository is not formally archived, but it was last pushed in January 2016, matching the stale release history and indicating that the project is effectively inactive.

Maintainers

Only one registry account has publish access. That is a modest resilience concern for an individually owned package, and the long inactivity provides no evidence of an active backup maintainer.

Package scaffolding

The artifact includes a README, but it is only 14 characters and provides essentially no usage guidance; missing tests and changelog files are normal for a published artifact and are not counted against it.