fawno/aeat

The package includes tests, a clear README, and a matching source repository. Its small project footprint, absent security scanning, and unpinned workflow actions leave modest maintenance and build-integrity concerns.

Latest 2.0.1

Packagist

67%

Total Score

Maintainer Stability

Dependencies

100

Maturity

Supply Chain

Health Score Breakdown

Repo commit activity

The repository recorded 0 commits and 0 active maintainers in the last three months. The recent release and push show some continued activity, but the current quiet period is still a maintenance caution.

Repo tooling

Composer is used for builds, but no security-scanning tools were detected. This is a modest transparency and maintenance gap rather than evidence that the package is unsafe.

Security policy

The repository has no security policy. For a package providing web-service client classes, this reduces guidance for reporting and handling vulnerabilities.

Workflow audit

The single workflow was fully analyzed, uses read-only permissions, and has no reported audit findings or untrusted-input sinks. However, all 5 action references are unpinned, leaving avoidable build-integrity exposure.