h4cc/wkhtmltopdf-i386
Composer package that bundles the 32-bit Linux wkhtmltopdf binary, so PHP and Laravel apps can convert HTML to PDF without a system-wide install. Works well with Snappy-style wrappers for invoices, reports, and other printable documents. 32-bit only; check architecture compatibility before use.
i386-only target, and LGPL-3.0 license are all items that belong in your technical due-diligence log — particularly if you sell into enterprises that ask for SBOMs or run vulnerability scans on container images.Consider it only when all of the following hold:
wkhtmltopdf-based pipeline (typically knplabs/knp-snappy or barryvdh/laravel-snappy) and need to pin the binary via Composer instead of a system package, for reproducibility.Look elsewhere when any of these are true — which, for new work, is most of the time:
file://, internal metadata endpoints) layered on top of years of unpatched WebKit CVEs. This alone should disqualify it for customer-supplied templates.wkhtmltopdf has had no meaningful release since 0.12.6 and the project has been wound down; this package stopped at 2018. You are adopting abandonware.Preferred alternatives to evaluate instead: spatie/browsershot or a Gotenberg container (headless Chromium — modern CSS, maintained, x86_64/ARM), barryvdh/laravel-dompdf for simple documents where fidelity is negotiable, or a managed API (DocRaptor, PDFShift) if you want zero infrastructure ownership.
To executives: This is a small, free, community-maintained binary that lets a Laravel app turn HTML into PDF. It is not a strategic platform choice — it's a convenience wrapper around an open-source tool whose upstream project has been inactive for years and whose last package release was January 2018. My recommendation is do not adopt it for new work. If it's already in the codebase, treat it as known technical debt with a defined exit: it constrains us to 32-bit Linux, exposes us to unpatched rendering-engine vulnerabilities if we ever render customer content, and will be increasingly awkward to build and deploy. The migration path to a maintained headless-Chromium renderer is well understood and typically a few days of template work, not a quarter.
To engineering: The package bundles a precompiled wkhtmltopdf i386 binary and is consumed through a wrapper like Snappy. Concrete concerns: (1) architecture — 32-bit only, requires multiarch libs on x86_64 and won't run on ARM; (2) age — last release 2018, upstream effectively frozen, so no security patches for the WebKit stack; (3) security posture — sandboxing is weak, and untrusted HTML implies SSRF and local-file-read exposure; (4) license — LGPL-3.0 obligations attach to redistribution. Use it only for a short-lived spike, or where a legacy 32-bit host already depends on it. For anything shipping, propose Browsershot or Gotenberg so we get a maintained Chromium, arm64 images, and modern CSS support.
One-line summary for a decision log: Cheap, zero-infrastructure HTML→PDF shim; obsolete on architecture, maintenance, and security grounds — approve for prototyping only, reject for production.
How can I help you explore Laravel packages today?