@react-pdf/stylesheet

Repo toolingcaution

The repository uses established build and test tooling, including Vitest, Rollup, TypeScript, Babel, and npm scripts. It reports no security scanning tools, which is a minor hygiene limitation but not decisive against adoption.

Security policycaution

The repository has no security policy. This reduces disclosure transparency for a library consumers may rely on, though active development, documentation, and provenance provide compensating maturity evidence.

Workflow auditcaution

All three workflows were analyzed successfully, with no untrusted checkout or script-injection findings and one workflow scoping permissions at job level. However, all 19 action references are unpinned and the release workflow has two high-confidence low-severity adhoc-package findings, so workflow hygiene is a minor concern.