Package Health/steamulo/pdfjs-viewer-bundle

steamulo/pdfjs-viewer-bundle

The source includes tests and a readable guide, while its license files make the licensing trail visible despite a declaration mismatch. Its organization backing and lack of install scripts help, but adopting a package marked abandoned with no commits in over three years remains a liability.

Latest v4.0.0

Packagist

31%

Total Score

Maintainer Stability

Maturity

Supply Chain

Health Score Breakdown

Registry deprecation

Packagist marks the entire package as abandoned, with no replacement specified. This is a direct warning that continued maintenance and support should not be expected.

Repo commit activity

The repository had zero commits and zero active maintainers in the last three months, consistent with the long gap since the latest release. The non-archived repository does not compensate for the absence of recent work.

License

The artifact and repository contain license files, so licensing is documented, but the manifest declares MIT while the detected artifact license is Apache-2.0. That mismatch warrants clarification before adoption.

Release history

The latest release was published on January 31, 2023, and there were no releases in the following 12 months. The package has an established history, but its recent release inactivity raises abandonment risk.

Security policy

The repository has no security policy, leaving no documented channel or process for reporting vulnerabilities. This is a transparency gap, though it is less severe than the maintenance evidence.

Vulnerabilities

We didn't find any vulnerabilities for this package.

Package versions

Maintainers

jjalvarezl

Direct Dependencies

Dependency	Last Release	Score
twig/twig Version ^2.0\|^3.0	—	—
symfony/http-foundation Version ^4.0\|^5.0\|^6.0	—	—
symfony/framework-bundle Version ^4.0\|^5.0\|^6.0	—	—
sensio/framework-extra-bundle Version ^6.1	—	—