leongrdic/pdf417
The codebase has tests and a repository README, and the release notes identify it as an initial release. Its small dependency set and lack of install scripts reduce integration surprises, but no security scanning is configured.
55%
Total Score
50
100
75
100
Health Score Breakdown
This is the only release, published 1,254 days ago, with no releases in the last 12 months. That is strong evidence of stalled maintenance, although the package is not marked deprecated.
The repository recorded zero commits and zero active maintainers in the last three months, reinforcing the long period without a new release. No newer activity is provided to offset this concern.
Composer build tooling is present, but no security scanning tools were detected. That is a transparency and maintenance gap, though it is not evidence that the package is unsafe.
The sole workflow was fully analyzed with no dangerous triggers, untrusted checkouts, injection findings, or excessive permissions. However, all five action references are unpinned, leaving avoidable build reproducibility and action-integrity risk.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
No maintainer information available.
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 intervention/image Version ^2.7 | — | — |
Weekly Downloads
Info
- Last Published
- 3 years ago
- Created
- 3 years ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.