nucleos/dompdf-bundle

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers in the last three months. This is a maintenance concern, though the recent 4.5.0 release and later repository push provide some compensating evidence.

Repo toolingcaution

The project uses Composer and Make, showing build structure, but no security-scanning tools were detected. That weakens automated security hygiene without indicating abandonment by itself.

Security policycaution

The repository has no security policy. This reduces transparency for reporting vulnerabilities and handling security issues, although it does not by itself make the package unfit.

Workflow auditcaution

Both analyzed workflows completed the audit without dangerous triggers, untrusted checkouts, script injection, or reported findings. However, all two action references are unpinned, which leaves their exact revisions uncontrolled; the absence of top-level permissions is acceptable on its own.