PDFMerger for PHP/Symfony
42%
Total Score
unhealthy
Risky: no commits or releases since November 2018, indicating a long-abandoned dependency.
Only four releases were published, all on November 23, 2018, with no releases in the last 12 months. This indicates the package has received no registry maintenance for nearly eight years.
The repository recorded zero commits and zero active maintainers in the last three months, consistent with the last push occurring in November 2018. This is strong evidence of abandonment.
The manifest declares MIT and the artifact contains license files, but detected LGPL-3.0 and GPL-3.0 text is not covered by that declaration. The bundled licensing mismatch creates a real adoption concern.
The linked repository has no security policy. This is a transparency and vulnerability-reporting gap, though it is secondary to the long absence of maintenance.
We didn't find any vulnerabilities for this package.
No direct dependencies.
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.