nfephp-org/nfephp
It includes tests, a substantial README, and clear licensing, but maintenance evidence is absent. Pinning this release would leave an application on a discontinued line.
12%
Total Score
50
58
Health Score Breakdown
The package is explicitly marked abandoned on Packagist, with nfephp-org/sped-nfe named as the replacement. This is a direct warning against taking a new dependency on this package.
The last registry release was in October 2021, with no releases in the last 12 months. The long release gap strongly indicates that this release line is no longer maintained.
The repository recorded zero commits and zero active maintainers in the last three months. This corroborates the package's lack of ongoing maintenance.
The package declares GPL-3.0+ and LGPL-3.0+ and includes license files, so it is licensed. The artifact also contains detected MIT text not covered by the declaration, which creates a minor licensing-transparency concern for consumers.
There were no new or closed issues or pull requests in the last month, and no open pull requests. This provides no evidence of active support or development.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
 Roberto L. Machado |
| Comunidade NFePHP |
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 mpdf/mpdf Version 6.0.0 | — | — |
endroid/qrcode Version 1.*@dev | — | — |
soundasleep/html2text Version ~0.2 | — | — |
zendframework/zend-mail Version ^2.5 | — | — |
Weekly Downloads
Info
- Last Published
- 4 years ago
- Created
- 10 years ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.