bocapro/quickbooks-connector

Release historycaution

The package is only 29 days old and has three releases, all published within roughly one hour, so its longer-term maintenance record is unproven.

Repo bus factorcaution

All five recent commits came from one contributor, leaving maintenance dependent on a single active developer.

Repo commit activitycaution

The repository recorded five commits in the last three months, showing some activity, but the small volume limits evidence of sustained maintenance.

Repo toolingcaution

Composer build tooling is present, but no security scanning tools were detected, leaving security-maintenance practices less transparent.

Security policycaution

The repository has no security policy, so users lack documented guidance for reporting vulnerabilities in an integration that handles OAuth credentials and tokens.