integrobr/nfse-sdk

Release historycaution

This is the first release and the package is less than one day old, so there is no evidence yet of sustained release maintenance or long-term stability.

Repo commit activitycaution

There were no commits and no active maintainers in the preceding three months; because the repository is newly created, this primarily reflects limited history, but it leaves maintenance capacity unverified.

Repo toolingcaution

Composer build tooling is present, but no security scanning tools were detected, leaving a security-process gap for a package that handles API credentials and fiscal data.

Security policycaution

No repository security policy was found, reducing transparency about vulnerability reporting and response expectations.

Token permissionscaution

The only workflow does not declare top-level token permissions. No write permissions were detected, but explicit least-privilege settings would provide stronger workflow hardening.