marekgogol/invoices

Dependency profilecaution

The package declares seven runtime dependencies and no development dependencies, creating a moderately broad runtime surface for a library that handles invoicing, exports, PDFs, and banking integrations.

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers in the last three months. This is a meaningful maintenance concern, although the recent release history provides some compensating evidence.

Repo toolingcaution

Composer is used as the build tool, but no security scanning tools were detected. The missing scanning is a hygiene gap rather than evidence of abandonment.

Security policycaution

The repository has no security policy. That reduces disclosure transparency, but it is a moderate hygiene concern rather than a standalone dependency risk.