setasign/seta-pdf-signer-addon-global-sign-dss

Repo bus factorcaution

All recent commits came from one contributor, creating concentrated maintenance responsibility. Organization ownership partly offsets the risk but does not remove the limited recent activity evidence.

Repo commit activitycaution

There was one commit in the last three months, showing some recent activity but a low maintenance rate. This limits evidence of rapid issue response or active development.

Repo toolingcaution

Composer build tooling is present, but no security scanning tools were detected. This is a modest transparency and maintenance-hygiene gap, not evidence that the package is unsafe.

Security policycaution

The repository has no security policy, leaving vulnerability-reporting expectations unclear. This is a minor transparency gap for a package handling signing-service credentials and PDF signatures.