Package Health

gamboa.martin/facturacion

Usable with caveats: the source repository is active and the release is not deprecated or archived, but the registry has had no release in the last 12 months. Maintenance is concentrated in one contributor, and the package carries a large runtime dependency set without a documented security policy.

Latest v35.70.1PackagistPackagist

72%

Total Score

Maintainer Stability
Maintainer Stability
Assesses the consistency and reliability of package maintainers

67

Dependencies
Dependencies
Evaluates the health and security of package dependencies

50

Maturity
Maturity
Indicates package age, release frequency, and adoption metrics

88

Supply Chain
Supply Chain
Evaluates supply chain security practices and risks

75

Health Score Breakdown

Dependency profilecaution

The package declares 47 runtime dependencies, including many PHP extensions and related packages. This creates substantial integration and update surface area, though the broad dependency set may be expected for a full invoicing system.

Project backingcaution

The repository is owned by an individual user rather than an organization. That makes the concentrated contributor activity more significant because there is less visible organizational redundancy.

Release historycaution

The package has 92 releases over roughly 3 years, but no registry release in the last 12 months despite a 4-day median interval historically. This suggests publication has slowed, although recent repository activity provides some compensation.

Repo bus factorcaution

Two contributors were active in the last 3 months, but one made about 80% of the 88 commits. The second contributor provides some continuity, yet maintenance remains notably concentrated.

Repo toolingcaution

The repository uses Composer, but no security-scanning tools were detected. Build tooling supports reproducibility, while the absence of scanning leaves a security-maintenance gap.

Vulnerabilities

We didn't find any vulnerabilities for this package.

Package versions

Maintainers

Martin Gamboa

Direct Dependencies

DependencyLast ReleaseScore
dompdf/dompdf
Version v3.1.0
—
—
phpunit/phpunit
Version ^10.0.0
—
—
tomsgu/pdf-merger
Version ^0.5.0
—
—
gamboa.martin/test
Version ^5.0.0
—
—
spatie/dropbox-api
Version ^1.19
—
—

Weekly Downloads

Info

Last Published
1 year ago
Created
3 years ago

Are You Affected?

Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.

Free. No credit card required.

Aikido Platform