mendesalexandre/php-nfse-nacional

Project backingcaution

The repository is owned by an individual rather than an organization, so the single-maintainer concentration is not offset by visible organizational backing.

Repo bus factorcaution

All 39 recent commits came from one contributor, creating a real continuity risk if that maintainer becomes unavailable.

Repo toolingcaution

Composer build tooling is present, but no security-scanning tooling was detected; the missing automated security layer is a modest transparency and maintenance gap.

Version stabilitycaution

v0.45.1 is not a prerelease, but the package remains below 1.0, so API changes are more likely than in a mature stable-major release.

Workflow auditcaution

The only workflow was fully analyzed, uses read-only permissions, and has no reported injection or audit findings. However, all six referenced actions are unpinned, leaving workflow supply-chain references less reproducible.