nfephp-org/sped-nfe
A broad contributor base, clear licensing, and substantial documentation support long-term use. The workflow is complete and has no detected dangerous findings, though its three action references are unpinned and the repository has no security policy.
88%
Total Score
100
94
50
Health Score Breakdown
The project uses Composer, but no security-scanning tools were detected. This is a modest transparency and maintenance-process gap, not evidence that the release is unsafe.
No repository security policy was found. For a library handling tax documents and external authorization services, this weakens vulnerability-reporting transparency.
The single workflow was fully analyzed with no dangerous triggers, untrusted checkouts, script injections, or audit findings. However, all 3 action references are unpinned, which leaves the build exposed to upstream action changes.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
 Roberto L. Machado |
| Gustavo Lidani |
| Comunidade NFePHP |
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 nfephp-org/sped-gtin Version ^1.1.0 | — | — |
nfephp-org/sped-common Version ^5.1.0 | — | — |
justinrainbow/json-schema Version ^5.2 | — | — |
Weekly Downloads
Info
- Last Published
- 2 months ago
- Created
- 7 years ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.