digitaldev-lx/laravel-invoice-express

Repo bus factorcaution

All 3 recent commits came from one contributor, giving the project a single-person maintenance dependency. The active repository helps, but does not compensate for the concentrated ownership.

Repo commit activitycaution

The repository received 3 commits in the last 3 months, so it is active, but the volume is modest for a package handling invoicing integrations. This limits confidence in its maintenance depth.

Repo toolingcaution

Composer build tooling is present, but no security scanning tools were detected. The missing scanning is a modest transparency and maintenance gap rather than evidence of a defect.

Security policycaution

The repository has no security policy. For an integration package handling credentials and financial documents, this weakens the documented process for reporting and handling vulnerabilities.

Workflow auditcaution

The only workflow was fully analyzed with no injection or high-severity findings, but both action references are unpinned. The absence of a top-level permissions block is acceptable here because the workflow does not request top-level write access.