jonasarts/tcpdf2-bundle

Release historycaution

This is a young package, about 51 days old, with four releases clustered over roughly 13 hours. That shows active initial publishing but does not yet establish a durable release cadence.

Repo commit activitycaution

The repository records no commits and no active maintainers in the last three months. Because the package is only about 51 days old, this is a meaningful but not yet conclusive maintenance concern.

Security policycaution

No security policy is present in the repository, leaving vulnerability reporting and response expectations less transparent.

Workflow auditcaution

The single workflow was fully analyzed, uses read-only permissions, and has no detected dangerous sinks or audit findings. However, all six action references are unpinned, leaving build inputs exposed to future upstream changes.