evosys21/pdflib

The package is clearly licensed, tested, documented, and backed by a matching organization repository. Its workflow uses read-only permissions but leaves all three actions unpinned, and no security policy is provided.

Latest 1.3.1

Packagist

68%

Total Score

Maintainer Stability

Dependencies

100

Maturity

100

Supply Chain

Health Score Breakdown

Repo commit activity

The repository recorded zero commits and zero active maintainers in the last three months. A recent release partly offsets this, but the short-term lack of development activity is a maintenance concern.

Repo issue activity

There is one open issue and no issues or pull requests were opened or closed in the last month, which is consistent with the recent lack of commit activity and modestly limits evidence of active support.

Security policy

The repository has no published security policy. This weakens the documented process for reporting and handling vulnerabilities, although it is not evidence of a vulnerability by itself.

Workflow audit

The single workflow was fully analyzed, uses read-only permissions, and has no dangerous triggers or audit findings. However, all three action references are unpinned, leaving the CI supply chain less reproducible.