ibrcan/ivd

The MIT license and usable README make the package easier to evaluate and integrate. Its small codebase has no recent security policy or automated maintenance activity, leaving future compatibility and support uncertain.

Latest V1.0.7

Packagist

42%

Total Score

Maintainer Stability

Maturity

Supply Chain

Health Score Breakdown

Release history

The package has had no release in nearly five years and no releases in the last 12 months. Its four releases were concentrated in December 2021, so the historical burst does not offset the prolonged gap.

Repo commit activity

The repository recorded zero commits and zero active maintainers in the last three months, consistent with the nearly five-year release gap. This is strong evidence of abandonment risk.

Maintainers

Only one registry maintainer is listed, leaving limited publishing and support capacity. The repository is user-owned rather than organization-backed, so there is no provided evidence of a broader team compensating for that thin base.

Security policy

The linked repository has no security policy. For a library that handles tax-service credentials and API access, the absence reduces transparency around vulnerability reporting and support.

Workflow audit

The single workflow was fully analyzed with no dangerous triggers or audit findings, but both action references are unpinned. The missing top-level permissions block is acceptable on its own, while unpinned actions remain a supply-chain hygiene gap.