hardcastle/ledger-direct-core

This release appears usable and reasonably well-engineered, with an MIT license, no deprecation, no install-time scripts, a focused six-runtime-dependency profile, an organization-owned repository, active recent development, balanced contribution between two contributors, repository tests, and a clean workflow risk profile. However, the package is only 3 days old with four releases compressed into roughly 3 days, is still on the 0.x line, has no published changelog, lacks a repository security policy, and its CI workflow does not declare top-level token permissions. These are meaningful maturity and transparency gaps, but they do not outweigh the concrete source, testing, and maintenance evidence; adopt with normal early-stage dependency caution.

Latest 0.4.0Packagist

Vulnerabilities

We didn't find any vulnerabilities for this package.

Maintainers

Alexander Busse

Direct Dependencies

Dependency	Last Release	Score
psr/log Version ^3.0	—	—
brick/math Version ^0.12 || ^0.13 || ^0.14 || ^0.15 || ^0.16 || ^0.17 || ^0.18 || ^0.19 || ^0.20	—	—
psr/http-client Version ^1.0	—	—
psr/http-factory Version ^1.0	—	—
psr/simple-cache Version ^3.0	—	—