easybill/zugferd-php

Repo commit activitycaution

No commits and no active maintainers were recorded in the last 3 months, which is a maintenance concern; however, recent releases, release notes, and merged pull requests provide compensating evidence of ongoing work.

Security policycaution

The repository has no published security policy, leaving vulnerability-reporting expectations less transparent for a library handling invoice data.

Token permissionscaution

All 3 workflows lack top-level token-permission declarations. No workflow requests top-level write access, but explicitly declaring least-privilege permissions would provide stronger CI hardening.