jspdf

Repo commit activitycaution

No commits and no active maintainers were recorded in the last three months. Although recent repository pushes and issue handling provide some compensation, the missing commit activity is a real maintenance concern.

Repo toolingcaution

The repository uses established build tools including Rollup, Babel, Webpack, TypeScript, and npm scripts. However, no security-scanning tools were detected, leaving a modest transparency and defense-in-depth gap.

Token permissionscaution

All three workflows lack top-level permissions declarations. No workflow requests top-level write access, but explicitly declaring least-privilege permissions would provide stronger containment.