andreygrin/pdfmerger

Usable with caveats: the package is licensed, stable, clearly linked to its repository, and has a usable README. However, it has had no releases or commits for over five years, with no active maintainers recently and minimal repository adoption, so verify compatibility before depending on it.

Latest 1.0.5

Packagist

58%

Total Score

Maintainer Stability

Dependencies

100

Maturity

Supply Chain

Health Score Breakdown

Repo commit activity

There were no commits and no active maintainers in the last three months. Combined with the last push being over five years ago, this is strong evidence of abandonment risk.

Project backing

The repository is owned by an individual rather than an organization, so there is no organizational backing signal to compensate for the inactive commit history.

Release history

The latest release was published over five years ago, and there were no releases in the last 12 months. This indicates materially stale maintenance for a library dependency.

Repo popularity

The repository has zero stars, forks, and watchers. Popularity is only supporting evidence, but these values provide no external adoption signal to offset the stale activity.

Repo tooling

Composer is used as a build tool, showing basic project tooling, but no security scanning tools are configured. The missing scanning is a modest transparency gap rather than a standalone severe risk.