@react-pdf/fns

Repo bus factorcaution

One contributor made about 60% of recent commits, creating some concentration risk, but 17 contributors were active and a second contributor supplied 25%.

Repo package mentioncaution

The repository name does not match the package and its README does not mention @react-pdf/fns, so the linkage is less explicit; this is partly consistent with the package being a subpackage of the react-pdf project.

Repo toolingcaution

The project uses established build and test tooling, including TypeScript, Rollup, Vitest, and Babel, but no security-scanning tool was detected.

Security policycaution

No repository security policy was found, reducing transparency about vulnerability reporting and response expectations.

Workflow auditcaution

All three workflows were analyzed with no untrusted checkouts, script injection, or high-severity findings. However, all 19 action references are unpinned and the release workflow installs packages outside a lockfile, creating moderate workflow hygiene risk.