invoicexml/facturx

Release historycaution

The package is less than one day old and has only two releases, so there is not yet enough history to demonstrate sustained maintenance or release stability.

Repo bus factorcaution

One contributor made all recent commits. Organization ownership provides some handoff capacity, but no second active contributor is shown.

Repo commit activitycaution

Only two commits were recorded in the last three months, all during this newly created project period, so sustained maintenance remains unproven.

Security policycaution

The repository has no security policy. This is a transparency and vulnerability-reporting gap, although it is not evidence of a security defect by itself.

Workflow auditcaution

The single workflow was fully analyzed with no dangerous audit findings or untrusted checkouts. However, both action references are unpinned, leaving dependency versions mutable.