wmather/mergepdf

Release historydanger

The latest release was in March 2015, about 11 years ago, with no releases in the last 12 months. This is strong evidence of abandonment risk despite the package having three historical releases.

Licensecaution

No declared license, license file, or detected repository license was found. That creates a real redistribution and adoption concern for a dependency.

Repo popularitycaution

The repository has zero stars and forks and one watcher. Popularity is only supporting evidence, but these very limited adoption signals provide little confidence that issues would be noticed or addressed.

Repo toolingcaution

Composer is used as the build tool, but no security scanning tooling is present. This is a modest transparency and maintenance gap rather than a severe risk on its own.

Repository archivedcaution

The repository is not archived, which avoids the strongest abandonment signal, but its last push was about 11 years ago and does not offset the stale release history.