optimistdigital/nova-currency-vat-field

Package scaffoldingcaution

A README and changelog are present, and the repository uses GitHub Releases, but tests are absent from both the package and repository. For a small UI field extension this is a maintenance gap, though the documentation and release history partly compensate.

Repo bus factorcaution

All 3 recent commits came from one contributor, creating a real continuity risk. Organization backing provides some ability to hand maintenance off, so this is caution rather than a severe abandonment signal.

Repo toolingcaution

Composer build tooling is present, but no security-scanning tools were detected. The missing scanning is a transparency gap, though it is not decisive for this small package.

Security policycaution

No security policy was found in the repository, leaving vulnerability-reporting expectations unclear. This lowers transparency but is partly offset by the package's small scope and active releases.