Its single runtime dependency keeps the install surface small, and the stable version avoids prerelease churn. The artifact lacks a README, while the repository has no security policy or meaningful activity evidence.
42%
Total Score
100
67
75
The latest release was published in July 2020, with no releases in the last 12 months. That long publication gap is a substantial maintenance and abandonment concern.
The package declares no license, contains no license file, and the linked repository has no license file. This creates a material legal and transparency gap for dependency adoption.
The repository name does not match the package name, and the README does not establish that it contains this package. A subpackage mismatch can be ordinary, but the available evidence does not clearly confirm repository ownership.
The linked repository has no security policy. This is a transparency and vulnerability-reporting gap, though it is less severe than the prolonged lack of releases.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
scancode-system/pdf-module Version ^2.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.