easybill/e-invoicing

Release historycaution

The package is about 803 days old with 10 releases, but only one release occurred in the last 12 months; this suggests slower release momentum and warrants caution for a standards-oriented library.

Repo commit activitycaution

The repository reports zero commits and zero active maintainers over the last three months. This conflicts with the recent push and merged pull requests but still indicates weak recent direct commit momentum, a meaningful maintenance concern.

Security policycaution

No repository security policy is present, leaving vulnerability-reporting expectations undocumented; this is a governance gap for a library handling structured invoice data.

Token permissionscaution

All three workflows lack top-level token permissions declarations. No workflow requests top-level write access, but explicit least-privilege declarations would provide stronger CI hardening.

Version stabilitycaution

Version 0.4.0 is not a stable-major release, so API compatibility and long-term maturity remain less certain even though it is not marked as a prerelease.