fond-of-oryx/invoice-api

Release historydanger

The package has had no release in more than three years, with zero releases in the last 12 months. This is a substantial maintenance and abandonment concern despite the short historical release intervals.

Package scaffoldingcaution

The package contains tests and the repository contains tests, which supports maintainability. It has no README or changelog, leaving consumer guidance and release documentation thin for a library package.

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers in the last three months. A push in January 2025 shows some newer activity, but the current lull still lowers confidence in ongoing maintenance.

Repo toolingcaution

The project uses Make and Composer, showing basic build tooling, but no security-scanning tools were detected. That is a modest transparency and maintenance gap.

Security policycaution

No security policy was found in the linked repository. This weakens transparency around vulnerability reporting, though it is not by itself evidence that the package is unsafe.