fresh-advance/electronic-invoice
The project includes tests, release notes, security scanning, and a clear source repository. Maintenance is concentrated in one contributor, and all analyzed workflow actions are unpinned, adding resilience and build-integrity concerns.
76%
Total Score
83
100
67
Health Score Breakdown
Composer post-install and post-update scripts run during dependency operations. The signal does not show harmful behavior, but install-time execution adds some review burden.
All 7 recent commits came from one contributor, so maintenance depends heavily on a single person despite organization ownership.
The repository has no security policy, leaving vulnerability-reporting expectations and response procedures undocumented.
Both workflows were analyzed successfully with no reported audit findings or untrusted-code sinks, but both of the two action references are unpinned, weakening build reproducibility and action-integrity controls.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
No maintainer information available.
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 horstoeko/zugferd Version ^1.0 | — | — |
fresh-advance/invoice Version ^v5.0.0 | — | — |
Weekly Downloads
Info
- Last Published
- 9 months ago
- Created
- 1 year ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.