fond-of-oryx/erp-invoice-api

Package scaffoldingcaution

The artifact includes tests, and the repository also contains tests, which supports reliability. However, no README is present for a library that consumers must integrate, creating a documentation gap.

Release historycaution

The latest release was published over two years ago, with no releases in the last 12 months. The package has seven releases and a prior release cadence, but current registry maintenance appears stalled.

Repo commit activitycaution

The repository recorded no commits and had no active maintainers in the last three months. A push in January 2025 shows it was not long-abandoned, but recent maintenance is currently absent.

Security policycaution

The linked repository has no security policy, reducing transparency about vulnerability reporting and response. This is a hygiene concern rather than evidence that the release is unsafe.

Workflow auditcaution

The single workflow was fully analyzed with no dangerous triggers or audit findings, but all three action references are unpinned. The absence of a top-level permissions block is acceptable on its own.