hillelcoren/invoice-ninja

Dependency profilecaution

The application declares 88 runtime dependencies, creating a broad maintenance and transitive-dependency surface, although this is consistent with a full invoicing application.

Lifecycle scriptscaution

Five install- and update-time lifecycle scripts run during package operations, increasing installation complexity and the amount of code executed automatically.

Repo bus factorcaution

One contributor made 439 of 480 commits, or about 91%, which creates a significant continuity risk despite 14 contributors being active and the repository belonging to an organization.

Token permissionscaution

Neither workflow declares top-level token permissions, leaving the default permission scope less explicit than recommended; no workflow requests top-level write access.