n1ebieski/ksef-php-client

Project backingcaution

The repository is owned by an individual rather than an organization, so maintenance continuity depends more directly on the project contributors.

Repo bus factorcaution

The leading contributor made about 75% of recent commits, which concentrates continuity risk. Two other contributors remain active, partly compensating for that concentration.

Repo toolingcaution

Composer build tooling is present, but no security-scanning tool was detected. This is a modest transparency and assurance gap rather than evidence of an unsafe release.

Version stabilitycaution

The assessed release is 2.0.0-rc.1, so it is a prerelease despite the recent release history. The recent prerelease share is only 5%, which partly limits the concern.

Workflow auditcaution

The single workflow was fully analyzed, uses read-only permissions, and has no reported dangerous findings. However, all three referenced actions are unpinned, leaving avoidable build-integrity risk.