@types/pdfmake

Repo package mentioncaution

The linked repository is a large monorepo and neither matches the package name nor mentions it in its README, creating some package-to-source ambiguity; the organizational backing partly offsets this concern.

Workflow auditcaution

All seven workflows were analyzed, all 25 action references are pinned, and permissions are mostly read-only; four medium-confidence template-injection findings remain hygiene concerns.