Package Health/ibrahimbougaoua/laravel-vfdplus

ibrahimbougaoua/laravel-vfdplus

a system that sends electronic invoices/receipts to the TRA in real time receiving a validation response from the tax authority.

Latest v1.0.0

Packagist

47%

Total Score

unhealthy

Risky: one release in 2 years 8 months and inactive recent commits outweigh otherwise solid packaging.

Health Score Breakdown

Release history

This is the only release, published 2 years 8 months ago, with no releases in the last 12 months. That strongly raises abandonment and compatibility risk for a production dependency.

Repo commit activity

The repository recorded zero commits and zero active maintainers in the last 3 months. Combined with the single registry release, this indicates weak recent maintenance activity.

Workflow audit

All 12 action references are unpinned, three workflows grant top-level write access, and a high-confidence bot-conditions finding affects the Dependabot auto-merge workflow. The pull_request_target trigger has no untrusted checkout or script-injection sink, but the automation still needs tightening.

Lifecycle scripts

A post-autoload-dump install script is present. Lifecycle execution adds some install-time complexity, but this signal alone does not show harmful behavior.

Maintainers

One registry maintainer is consistent with a user-owned project, but it leaves little visible publishing redundancy if that person becomes unavailable.