fond-of-oryx/erp-invoice

Release historycaution

The package has 12 releases since November 2021, but its latest release was in July 2024 and there were no releases in the following 12 months. That suggests the package may be stable, but it also raises maintenance concerns for a dependency assessed over two years later.

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers in the last three months, consistent with the long gap since the latest release. The repository is not archived, but the recent inactivity still lowers confidence in ongoing maintenance.

Security policycaution

The linked repository has no security policy. This is a modest transparency gap for a package that may be used in production, though the clean workflow audit provides some compensating evidence.

Workflow auditcaution

The single workflow was fully analyzed with no untrusted checkouts, script injection, or high-severity findings. However, all three action references are unpinned, which leaves the build exposed to upstream action changes.