gamboa.martin/xml_cfdi_4
It includes a substantial test suite and has no install-time scripts or deprecation notice. A single maintainer and no security policy or scanning leave limited review capacity.
57%
Total Score
50
50
83
75
Health Score Breakdown
The package declares ten runtime dependencies, including several extensions and PHPUnit, creating a relatively broad compatibility surface; the signal does not show an extreme or clearly unmanaged dependency burden.
Only one registry publishing maintainer is listed. For this user-owned project, that represents limited observable publishing continuity and a higher bus-factor concern.
The package has 95 releases since September 2022, but none in the last 12 months and its latest release was about 17 months ago, indicating a meaningful maintenance slowdown.
The repository had no commits and no active maintainers in the last 3 months. This reinforces the stale release history and raises ongoing maintenance risk.
Composer is used for builds, but the repository has no security-scanning tooling. That is a modest transparency and maintenance gap rather than a severe risk by itself.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
 Martin Gamboa |
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 phpunit/phpunit Version ^10.0.0 | — | — |
gamboa.martin/test Version ^5.0.0 | — | — |
gamboa.martin/calculo Version ^5.0.0 | — | — |
gamboa.martin/errores Version ^6.0.0 | — | — |
gamboa.martin/validacion Version ^5.0.0 | — | — |
Weekly Downloads
Info
- Last Published
- 1 year ago
- Created
- 4 years ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.