jkuchar/pdfresponse

Licensecaution

The artifact includes a license file and the repository also has one, but the manifest declares LGPL-2.0-or-later while the detected text is LGPL-3.0. That mismatch should be resolved before relying on the package's stated licensing terms.

Release historycaution

The package has existed since 2016 with 17 releases, but it had no releases in the last 12 months despite a median interval of about 145 days. This indicates a meaningful slowdown, though the latest release is recent enough to show the project has not been abandoned outright.

Repo commit activitycaution

There were no commits and no active maintainers in the last three months. That suggests maintenance has paused after the latest release and raises the risk that issues will remain unattended.

Security policycaution

The repository has no security policy, leaving no stated process for reporting or handling vulnerabilities. This is a transparency weakness, although it is less serious than evidence of unsafe release or workflow behavior.

Version stabilitycaution

Version v0.6.5 is not marked prerelease, but the package remains below 1.0, so its public API may still change more readily than a stable-major release.