mahdiabderraouf/facturx-php

Maintainerscaution

Only one account has registry publishing access, which is a modest administrative concentration; active repository work by two contributors provides some practical compensation.

Repo toolingcaution

Composer build tooling is present, but no security-scanning tools were detected; this is a transparency gap for a package handling invoice documents.

Security policycaution

The repository has no security policy, leaving vulnerability-reporting expectations undocumented.

Token permissionscaution

The only workflow does not declare top-level token permissions. Although no write permissions were explicitly requested, the default access level is less clear than it should be.