bricre/amazon-selling-partner-sdk-vendor-invoices

Release historycaution

This package has only one release, published about five years ago, with no releases in the last 12 months. That is a substantial maintenance concern for an API client whose upstream service may change.

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers in the last three months, consistent with no updates since September 2021. This materially raises the risk of abandonment or stale API coverage.

Repo toolingcaution

Composer build tooling is present, but no security scanning tooling is configured. This is a modest transparency and maintenance gap rather than a severe risk.

Security policycaution

The linked repository has no published security policy. That weakens disclosure transparency, although it is less significant for this small generated client than for a security-sensitive service.

Workflow auditcaution

No GitHub Actions workflows were present, so there are no workflow risks to assess. This also means there is no automated workflow evidence supporting ongoing build or security maintenance.