fond-of-oryx/company-deleter-erp-delivery-note-connector

Release historycaution

This is the package's only release, published about 3 years and 6 months ago, with no releases in the last 12 months. That is a meaningful sign of limited release maintenance, although the linked repository was pushed more recently.

Repo commit activitycaution

There were no commits and no active maintainers in the last 3 months. Combined with the single registry release, this raises the risk that fixes or updates may arrive slowly.

Repo toolingcaution

The repository uses Make and Composer build tooling, which supports a reproducible project workflow. No security scanning tools were detected, leaving a modest hygiene gap.

Security policycaution

No security policy was found in the repository, so the process for reporting and handling vulnerabilities is not documented. This is a transparency weakness, but not evidence that the package is unsafe.

Workflow auditcaution

The workflow audit completed successfully and found no dangerous triggers or audit findings. All 3 action references are unpinned, however, which weakens build reproducibility and update integrity.