endroid/pdf

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers in the last three months, a concrete sign of currently weak maintenance activity.

Repo issue activitycaution

There are no open issues and one open pull request, but no issues or pull requests were merged in the last month, indicating limited recent activity.

Repo toolingcaution

Composer build tooling is present, but no security scanning tools were detected, leaving a repository security-hygiene gap.

Security policycaution

No security policy was found, reducing transparency about how vulnerabilities should be reported and handled.

Workflow auditcaution

The workflow audit completed fully with no dangerous triggers, untrusted checkouts, script injection, or severity-rated findings. However, all five referenced actions are unpinned, which weakens build reproducibility and supply-chain hygiene.