autoprotect-group/libmergepdf

Licensecaution

The artifact includes an Apache-2.0 license file, so the release is licensed, but the manifest declares WTFPL and the detected license differs. That mismatch should be resolved before adoption.

Release historycaution

This is the package's only release, published about 3 years and 6 months ago, with no releases in the last 12 months. That is meaningful evidence of limited ongoing maintenance.

Repo commit activitycaution

The repository recorded 0 commits and 0 active maintainers in the last 3 months, consistent with the package's one-release history and increasing abandonment risk.

Repo toolingcaution

The project uses Make and Composer, but no security scanning tools were detected. This is a modest maintenance and assurance gap, partly offset by the repository's tests and build structure.

Security policycaution

The repository has no security policy. This is a transparency gap for a PDF-processing library, although it does not by itself show that the package is unsafe.