@react-pdf/render

Repo bus factorcaution

The leading contributor made about 60% of recent commits, which is concentrated, but 17 contributors were active and a second contributor supplied 25%. The concentration is a mild resilience concern, not a severe abandonment signal.

Repo toolingcaution

The project uses established build and test tools, but no security-scanning tools were detected. That is a modest transparency and hygiene gap.

Security policycaution

No security policy was found in the repository. This weakens the project's documented vulnerability-reporting process, though it is not evidence of unsafe code by itself.

Workflow auditcaution

All three workflows were analyzed and had no untrusted checkouts or script-injection findings, but all 19 action references are unpinned and the release workflow installs packages outside a lockfile. These are concrete build-reproducibility and supply-chain hygiene weaknesses.