inquid/cfdi-sat

Package scaffoldingcaution

A substantial README and release notes document usage and the v0.2 change, but the repository reports no tests. Missing tests reduce confidence for an integration library, while absent changelog files are normal because release notes are present.

Release historycaution

Only two releases arrived within minutes on August 18, 2025, followed by no releases for about 13 months. This suggests limited maintenance evidence for a young package.

Repo commit activitycaution

There were no commits and no active maintainers in the last three months, consistent with roughly 13 months without a release and raising abandonment concerns.

Repo toolingcaution

Composer build tooling is present, but no security scanning tools were detected. That is a modest transparency and maintenance gap rather than evidence of unsafe behavior.

Security policycaution

The repository has no security policy, leaving vulnerability reporting and response expectations unspecified for a package that handles certificates and private keys.