dmitrirussu/php-sepa-xml-generator

Licensecaution

The release includes license files and the repository also has one, so licensing is documented. However, the manifest declares GNU while the detected license is ISC, creating an avoidable licensing ambiguity.

Maintainerscaution

Only one registry publishing maintainer is listed. The repository is user-owned rather than organization-backed, so there is limited visible continuity if that maintainer becomes unavailable.

Release historycaution

The latest release was published in October 2018, with no releases in the last 12 months and a median interval of about 4 years 2 months. This is a substantial maintenance concern for a payment-format library.

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers in the last 3 months. A push in July 2024 shows the repository is not entirely untouched, but current development activity is absent.

Security policycaution

The repository has no security policy and no security scanning tools. This does not make the package unsafe by itself, but it reduces transparency for handling vulnerabilities in a financial-data library.