Package Health

axiostudio/fattura-elettronica

The package is clearly documented, tested, licensed, and backed by an organization. Its release activity has stopped since February 2024, and the workflow uses two unpinned actions, so future compatibility and build reproducibility need care.

Latest 1.0.7PackagistPackagist

65%

Total Score

Maintainer Stability
Maintainer Stability
Assesses the consistency and reliability of package maintainers

100

Dependencies
Dependencies
Evaluates the health and security of package dependencies

100

Maturity
Maturity
Indicates package age, release frequency, and adoption metrics

81

Supply Chain
Supply Chain
Evaluates supply chain security practices and risks

67

Health Score Breakdown

Release historycaution

The latest release was on February 1, 2024, with no releases in the following 12 months despite a package age of 1040 days; this is a meaningful maintenance concern, though the package has nine releases and is not deprecated.

Repo popularitycaution

The repository has three stars and one fork, indicating limited adoption evidence; popularity is only supporting context and does not outweigh the clear documentation and tests.

Repo toolingcaution

Composer build tooling is present, but no security-scanning tools are reported, leaving a modest repository hygiene gap.

Security policycaution

The repository has no security policy, which makes vulnerability reporting less transparent; this is a secondary concern because the package is small and otherwise well documented.

Workflow auditcaution

The single workflow was fully analyzed with no dangerous triggers, untrusted checkouts, script injection, or audit findings. However, both action references are unpinned, which weakens build reproducibility.

Vulnerabilities

We didn't find any vulnerabilities for this package.

Package versions

Maintainers

Axio Studio

Direct Dependencies

DependencyLast ReleaseScore
symfony/validator
Version ^6.3
—
—
spatie/array-to-xml
Version ^3.2
—
—

Weekly Downloads

Info

Last Published
2 years ago
Created
2 years ago

Are You Affected?

Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.

Free. No credit card required.

Aikido Platform