cosmin-ciolacu/eu-vat-number-validator

Release historydanger

The package has had five releases, all concentrated around its first two days, with no release in about two years. That strongly lowers confidence in ongoing maintenance for a dependency.

Maintainerscaution

One registry maintainer is consistent with a small user-owned project, but it leaves little visible publishing redundancy when combined with the absence of recent activity.

Repo commit activitycaution

The repository recorded no commits and no active maintainers in the last three months, consistent with the long release pause. The package may be stable, but there is little evidence of current maintenance capacity.

Repo toolingcaution

Composer is used for the build, but no security scanning tool is configured. The missing scanning reduces supply-chain hygiene, though it does not by itself make the package unfit.

Security policycaution

The repository has no security policy, which makes reporting and handling vulnerabilities less transparent. This is a hygiene and maintenance concern rather than evidence that the release is unsafe.