manuxi/sulu-pdf-bundle

Release historycaution

Six releases were published within one day, so the project has not yet demonstrated a sustained release or maintenance pattern.

Repo commit activitycaution

The repository records zero commits and zero active maintainers during the last three months. Because the package is newly published, this is a caution about demonstrated maintenance capacity rather than proof of abandonment.

Repo toolingcaution

Composer build tooling is present, but no security scanning tools were detected. That is a modest transparency and maintenance gap, not a severe risk by itself.

Security policycaution

The repository has no security policy, leaving vulnerability reporting expectations unclear for a package intended to process web content and generate PDFs.

Workflow auditcaution

Both workflows were analyzed successfully, use read-only permissions, and have no audit findings or untrusted code paths. However, four of five action references are unpinned, weakening build reproducibility and update integrity.