Is setasign/fpdi safe to use?

setasign/fpdi has no known vulnerabilities on the latest version (v2.6.6). DepScope rates its health at 60/100 (moderate risk).

What is the latest version of setasign/fpdi?

The latest version of setasign/fpdi is v2.6.6, released 2026-03-13.

Does setasign/fpdi have known vulnerabilities?

No known vulnerabilities on the latest version of setasign/fpdi.

Is setasign/fpdi deprecated?

No, setasign/fpdi is actively maintained. Latest release: v2.6.6 (2026-03-13).

What are alternatives to setasign/fpdi?

DepScope has no curated alternatives for setasign/fpdi at this time.

What license does setasign/fpdi use?

setasign/fpdi is licensed under MIT.

setasign/fpdi

composervv2.6.6

FPDI is a collection of PHP classes facilitating developers to read pages from existing PDF documents and use them as templates in FPDF. Because it is also possible to use FPDI with TCPDF, there are no fixed dependencies defined. Please see suggestions for packages which evaluates the dependencies automatically.

License MITpermissive34 versions2 maintainers2 deps

Setasign/FPDI

/ 100

Health

safe to use

setasign/[email protected] is safe to use (health: 60/100)

Health breakdown0 – 100

20/25

maintenance

0/20

popularity

25/25

security

12/15

maturity

3/15

community

Vulnerabilities

none known

OSS Scorecard

OpenSSF security posture score

5.3/10

moderate

Maintainer trust

Active maintainers (3m)

2

Contributors (12m)

3

Primary author dominance

74%

GitHub stars

1,240

Health History

Dependency Tree

License Audit

Dependencies (2)

php ext-zlib

API access

Get this data programmatically — free, no authentication.

curl https://depscope.dev/api/check/composer/setasign/fpdi

Last updated · 2026-03-13T08:38:20+00:00