alves/sped-gtin

Release historycaution

This is the only release, published 105 days ago, so there is not yet enough release history to demonstrate an established maintenance cadence.

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers in the last three months. Because the package is only 105 days old, this is a meaningful but not conclusive maintenance concern.

Repo toolingcaution

Composer build tooling is present, but no security-scanning tools were detected, leaving a modest transparency and maintenance gap.

Security policycaution

The repository has no security policy, so users have no documented security-reporting path. This is a hygiene gap rather than evidence that the package is unsafe.

Workflow auditcaution

The single workflow was fully analyzed with no injection or high-severity findings, but both action references are unpinned. The workflow has no top-level permissions block, which is acceptable on its own.