@react-pdf/pdfkit

Repo package mentioncaution

The repository name does not match this package and its README does not mention it, creating some uncertainty about package-to-source mapping despite the package's stated fork relationship.

Repo toolingcaution

The project uses established build and test tooling, but no security scanning tools were detected; this is a modest transparency gap rather than evidence of abandonment.

Security policycaution

The repository has no security policy, leaving vulnerability reporting and response expectations undocumented.

Type declarationscaution

The package provides no type declarations, which is a real integration gap for a JavaScript library consumed from typed projects.

Workflow auditcaution

All three workflows were analyzed with no dangerous untrusted triggers or high-severity findings, but all 19 action references are unpinned and the release workflow installs packages outside a lockfile.