@pdf-lib/fontkit
An advanced font engine for Node and the browser
56%
Total Score
caution
No releases since 2020 and no commits in the last three months make this a maintenance risk despite solid package documentation.
Health Score Breakdown
The package has had no releases in the last 12 months, and its latest release was in November 2020. This strongly lowers confidence in ongoing maintenance, although the package has an established release history with nine releases.
The repository recorded zero commits and zero active maintainers in the last three months. Combined with the old latest release, this is strong evidence of stalled maintenance.
The release has no build attestation or trusted-publisher configuration, so consumers cannot verify its build provenance from this signal.
Only one registry account, hopding, has publish access. That creates a thin publishing base and a single point of failure, with no provided evidence of organizational redundancy.
The repository is owned by a user account rather than an organization, so the single registry maintainer is not offset by visible organizational backing.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 pako Version ^1.0.6 | — | — |
Weekly Downloads
Info
- Last Published
- 5 years ago
- Created
- 7 years ago
- Unpacked Size
- 4.2 MB
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.