dannyvankooten/vat.php

Registry deprecationdanger

Packagist marks the entire package abandoned and names ibericode/vat as its replacement. That makes this release unsuitable for a new dependency despite the repository's continued activity.

Repo commit activitycaution

The repository recorded no commits and no active maintainers in the last 3 months. A recent release and merged pull request provide some activity, but ongoing maintenance capacity is still unclear.

Repo package mentioncaution

The repository name does not match this package and its README does not mention the package name, which makes the package-to-repository relationship less transparent. The organization-owned repository provides some compensating backing.

Workflow auditcaution

The single workflow was fully analyzed with no dangerous triggers or audit findings, but all 3 action references are unpinned, leaving build inputs less reproducible.