aenzenith/laravel-birfatura

Maintainerscaution

Only one registry publishing maintainer is listed. For this user-owned, brand-new project that indicates limited observable publishing redundancy, though it does not by itself show poor maintenance.

Release historycaution

This is the first release, published 0 days ago, so there is no release track record yet. That limits evidence of sustained maintenance but does not indicate abandonment for a package this new.

Repo commit activitycaution

There were 0 commits and 0 active maintainers in the last 3 months, but the package and repository are only 0 days old. This is a lack of maintenance history rather than evidence that an established project has gone dormant.

Repo toolingcaution

Composer build tooling is present, but no security scanning tool was detected. The repository's SECURITY.md partly compensates by documenting how security issues should be handled.

Workflow auditcaution

Both workflows were fully analyzed with no audit findings or untrusted checkouts. However, all 6 action references are unpinned and one workflow grants top-level write permissions, creating moderate workflow supply-chain and token-scope hygiene concerns.