tomsgu/pdf-merger

Maintainerscaution

Only one registry account has publish access. The repository is user-owned rather than organization-backed, so there is limited visible publishing redundancy.

Project backingcaution

The registry namespace and repository are both user-owned, with no organization backing shown. This supports the concern about limited maintainer redundancy.

Release historycaution

The package has existed for over eight years but has only seven releases, with one release in the last 12 months and a median interval of about 367 days. This indicates slow maintenance rather than abandonment by itself.

Repo commit activitycaution

The repository had zero commits and zero active maintainers in the last three months. The recent release partly offsets this, but current development activity is quiet.

Repo toolingcaution

Composer build tooling is present, but no security scanning tools were detected. The package's tests and recent dependency update provide some compensating maintenance evidence.