elpandape/quipu-laravel

Release historycaution

The package is only 62 days old and has two releases, both published on the same day, so its maintenance record is still limited.

Repo bus factorcaution

One contributor made 100% of the three recent commits. Organization ownership provides some handoff capacity, but no second active contributor is shown.

Repo commit activitycaution

The repository had three commits in the last three months, showing some recent activity, but only one active maintainer limits evidence of sustained maintenance capacity.

Security policycaution

The repository has no security policy. This is a transparency gap for a package handling electronic invoicing and certificates, though it is not evidence of a security incident.

Workflow auditcaution

The workflow audit completed cleanly, uses read-only permissions, and found no dangerous triggers or audit findings. However, both of its two action references are unpinned, leaving a modest CI supply-chain hygiene gap.