konnco/pdf-merge
The package has a clear README, a stable version, a small runtime dependency set, and no install scripts. The MIT declaration conflicts with the Apache-2.0 license detected in the artifact, and the repository has no security policy.
58%
Total Score
100
100
67
75
Health Score Breakdown
A license file is present in both the artifact and repository, but the manifest declares MIT while the detected file text is Apache-2.0; that mismatch needs clarification before adoption.
The package is about 5 years old but has had no releases in the last 12 months; all six releases occurred in a short initial burst, leaving current maintenance unconfirmed.
The repository reports zero stars, forks, and watchers, offering no community signal to compensate for the lack of recent maintenance.
The repository is not archived, which preserves a path for maintenance, but its last push was in September 2021 and does not offset the long release gap.
The repository has no security policy, leaving vulnerability-reporting expectations unclear; this is a transparency gap, though not severe on its own.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
 Konnco |
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 setasign/fpdf Version ^1.8 | — | — |
setasign/fpdi Version ^2.3 | — | — |
Weekly Downloads
Info
- Last Published
- 5 years ago
- Created
- 11 years ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.