lucastmax/api-itau

Project backingcaution

The repository is owned by an individual account rather than an organization, so the single-contributor maintenance concentration is not offset by visible organizational backing.

Release historycaution

The package has 103 releases, but none in the last 12 months and its latest registry release was over a year ago. Recent repository commits partly offset the release gap, but the published package appears inactive.

Repo bus factorcaution

One contributor made all six commits in the last three months, leaving no demonstrated contributor redundancy and increasing continuity risk.

Repo toolingcaution

Composer build tooling is present, but no security scanning tooling was detected. This is a modest process gap rather than evidence of unsafe code.

Security policycaution

The repository has no security policy. For a package handling banking and payment APIs, this is a meaningful transparency and maintenance gap.