bowphp/pdf

Release historycaution

The package has only one release, published 262 days ago, so there is little release history to demonstrate sustained maintenance.

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers in the last 3 months; the recent release and non-archived status provide some context but do not show ongoing work.

Security policycaution

The repository has no security policy, leaving vulnerability reporting and response expectations undocumented.

Workflow auditcaution

All 3 analyzed action references are unpinned, which weakens build reproducibility. The workflow has read-only permissions, no untrusted checkout or injection findings, and a complete audit, limiting this to a hygiene concern.