fawno/fpdf-traits

Release historycaution

The package is only 81 days old with three releases, all clustered within roughly two hours, so it has little long-term maintenance history and a bursty release pattern.

Repo bus factorcaution

One contributor made all three recent commits, leaving maintenance dependent on a single active person. Organization ownership provides some backing, but no second active contributor is shown.

Repo commit activitycaution

There were three commits in the last three months, showing some recent activity, but the volume is limited for a project with such a short history.

Security policycaution

The repository has no security policy, leaving vulnerability-reporting and response expectations undocumented.

Workflow auditcaution

The single workflow was fully analyzed and uses read-only permissions, but all five action references are unpinned. No dangerous triggers, untrusted checkouts, script injection, or audit findings were reported.