pontedilana/weasyprint-bundle

Repo commit activitycaution

The repository recorded 0 commits and 0 active maintainers in the last 3 months. This is concerning for maintenance capacity, although the recent release and push provide some compensating evidence.

Repo issue activitycaution

There are 2 open issues and no issues or pull requests were closed in the last month. The small issue backlog is not severe, but the lack of recent resolution supports the maintenance concern.

Repo toolingcaution

Composer build tooling is present, but no security-scanning tools were detected. That weakens automated security hygiene without showing that the package is unsafe.

Security policycaution

The repository has no security policy. This reduces transparency about vulnerability reporting and response expectations.

Workflow auditcaution

Both workflows were analyzed successfully with no untrusted checkout or script-injection findings, but all 7 action references are unpinned and the auditor found a high-confidence unpinned container image. This is a supply-chain hygiene weakness, not a severe verdict on its own.