Package Health

yasinstc/pdfmerger

The README explains installation and use, and the package has a narrow declared runtime dependency. The license text differs from the manifest declaration, while the repository has no security policy or scanning tools.

Latest 0.0.1PackagistPackagist

52%

Total Score

Maintainer Stability
Maintainer Stability
Assesses the consistency and reliability of package maintainers

50

Dependencies
Dependencies
Evaluates the health and security of package dependencies

100

Maturity
Maturity
Indicates package age, release frequency, and adoption metrics

70

Supply Chain
Supply Chain
Evaluates supply chain security practices and risks

50

Health Score Breakdown

Release historydanger

This is the sole release, published about 38 months ago, with no releases in the last 12 months. That makes ongoing maintenance uncertain despite the package not being deprecated.

Licensecaution

The package declares MIT and includes a license file, so it is licensed; however, the detected MIT-0 text does not match the manifest declaration and warrants clarification.

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers during the last 3 months, consistent with the long release gap and raising abandonment risk.

Security policycaution

The repository has no security policy, which limits guidance for reporting and handling vulnerabilities in a package that processes PDF files.

Vulnerabilities

We didn't find any vulnerabilities for this package.

Package versions

Maintainers

Yasin Sütcü

Direct Dependencies

No direct dependencies.

Weekly Downloads

Info

Last Published
3 years ago
Created
3 years ago

Are You Affected?

Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.

Free. No credit card required.

Aikido Platform