@react-pdf/textkit

Repo package mentioncaution

The repository name does not match this package and its README does not mention the package, so the package-to-repository linkage is less explicit than ideal.

Repo toolingcaution

The project uses established build and test tooling, though no security-scanning tool was detected, leaving a modest process gap.

Security policycaution

The repository has no security policy, reducing transparency for reporting and handling vulnerabilities.

Workflow auditcaution

All three workflows were analyzed with no untrusted checkout or script-injection findings, but all 19 action references are unpinned and the release workflow installs packages outside a lockfile.