Package Health/rubiconinternational/pdfparser

rubiconinternational/pdfparser

It has a clear LGPL-3.0 license, documentation, repository tests, and no install-time scripts. The main concern is that both registry releases and repository commits stopped in April 2022, while all 21 workflow actions remain unpinned and no security policy is present.

Latest v2.1.1

Packagist

45%

Total Score

Maintainer Stability

Dependencies

100

Maturity

Supply Chain

Health Score Breakdown

Release history

The latest release was on April 12, 2022, and there have been no releases in the past four years despite 56 total releases. This is strong evidence of abandonment risk for a library consumers may need to keep compatible and secure.

Repo commit activity

The repository recorded zero commits and zero active maintainers in the past three months, consistent with the release history showing no updates since April 2022. The inactive source project materially raises maintenance risk.

Repo popularity

The linked repository has zero stars, forks, and watchers. Popularity is only supporting evidence, but these counters provide no additional community signal to offset the lack of recent maintenance.

Security policy

The repository has no security policy, so there is no documented channel or process for reporting vulnerabilities. The gap matters more because the project has also shown no recent maintenance.

Workflow audit

All three workflows were analyzed successfully and have no reported dangerous findings, but all 21 action references are unpinned. This leaves the build exposed to changing upstream action code and is a meaningful hygiene weakness.