react-pdf

Dependency profilecaution

Nine runtime dependencies is a moderate dependency surface for a React PDF viewer; it warrants normal transitive-dependency review but is not excessive on its own.

Maintainerscaution

Only one registry account has publish access, creating a concentration and bus-factor concern; however, the repository and release activity show that this account is actively maintaining the project.

Project backingcaution

The repository is owned by the individual user wojtekmaj rather than an organization, so the single registry maintainer is not offset by organizational backing; active repository and release evidence nevertheless provides meaningful compensation.

Repo toolingcaution

The repository uses TypeScript and npm build tooling, but no security scanning tools were detected; this is a defense-in-depth gap rather than evidence of unmaintained code.

Security policycaution

No SECURITY.md or equivalent security policy was found, which weakens vulnerability-reporting transparency and is a genuine, though non-critical, maintenance gap.