dompdf/php-font-lib

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers in the last three months. The recent release partly offsets this, but the current development activity is still thin.

Repo issue activitycaution

There were no new or closed issues and no new or merged pull requests in the last month, leaving open work without evidence of recent issue-tracker activity. This is a modest maintenance concern, not abandonment by itself.

Repo toolingcaution

Composer is used for builds, but no security scanning tool was detected. The missing scanner is a hygiene gap rather than evidence that the release is unsafe.

Workflow auditcaution

The single workflow was fully analyzed with no injection, untrusted-checkout, or auditor findings. However, all three action references are unpinned, so their versions can change without a repository commit.