gosuccess/easybill-api

Release historycaution

This is a 48-day-old package with only one release, so there is little observed evidence of sustained release maintenance or compatibility handling.

Repo bus factorcaution

All 19 commits in the last three months came from one contributor, leaving a concentrated maintenance path. Organization ownership provides some handoff capacity, but no second active contributor is shown.

Repo toolingcaution

Composer build tooling is present, but no security-scanning tools were detected, leaving a modest gap in repository security hygiene.

Security policycaution

The repository has no security policy, reducing transparency about vulnerability reporting and response expectations.

Workflow auditcaution

The single workflow was fully analyzed with no untrusted checkouts, injection findings, or write-wide permissions. However, all four action references are unpinned, so their revisions can change unexpectedly.