amazscript/laravel-einvoicing
It has clear documentation, tests, release notes, and a matching source repository. The single-contributor project has no security policy, and all eight workflow actions are unpinned.
67%
Total Score
83
79
50
Health Score Breakdown
The package is only 37 days old, with five releases concentrated on its first day. This shows active initial development but provides little evidence of long-term maintenance.
All 61 recent commits came from one contributor, leaving maintenance highly dependent on a single person. The repository is user-owned rather than organization-owned, so no organizational handoff is shown to offset this.
The project uses Composer and Make, but no security-scanning tools were detected. This is a modest transparency and maintenance gap rather than evidence of unsafe code.
The repository has no security policy, leaving no documented path for reporting vulnerabilities or coordinating fixes.
Version 0.4.0 is not a stable major release, so the public API may still change. It is not marked as a prerelease, which partly offsets the concern.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
 Denis Decilap |
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 illuminate/http Version ^12.0|^13.0 | — | — |
illuminate/queue Version ^12.0|^13.0 | — | — |
guzzlehttp/guzzle Version ^7.8|^8.0 | — | — |
illuminate/support Version ^12.0|^13.0 | — | — |
illuminate/database Version ^12.0|^13.0 | — | — |
Weekly Downloads
Info
- Last Published
- 1 month ago
- Created
- 1 month ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.