dompdf/php-svg-lib

Repo commit activitycaution

The repository had zero commits and zero active maintainers in the last three months, indicating recently quiet development and a moderate maintenance risk, although the release history shows a release during that period.

Repo issue activitycaution

There were no new or closed issues or pull requests in the last month, with one open pull request remaining; this is a mild sign of limited current activity rather than evidence of abandonment on its own.

Repo toolingcaution

The project uses Composer, but no security-scanning tools were detected. This is a transparency and hygiene gap, partly offset by the repository's security policy and tested source tree.

Workflow auditcaution

The single workflow was fully analyzed with no dangerous triggers, untrusted checkouts, script injection, or audit findings. However, all three action references are unpinned, leaving avoidable dependency-integrity exposure.