pauloak/nfse-lajeado

The package includes a clear README, an MIT license, and release notes for this version. Its eight runtime dependencies and lack of security scanning add maintenance overhead for a small project.

Latest 1.0.2

Packagist

54%

Total Score

Maintainer Stability

Maturity

Health Score Breakdown

Maintainers

One user account publishes the package, which is a thin maintainer base for a library handling web-service integration and certificate-based signing. No organizational backing is shown to compensate for that concentration.

Release history

Only three releases were published, all around February 2023, with no release in roughly three years and seven months. This is a substantial abandonment and compatibility concern, though the package is not deprecated.

Repo commit activity

The repository recorded zero commits and zero active maintainers in the last three months, consistent with the long gap since the latest release. This limits evidence that issues or platform changes are being addressed.

Repo popularity

The repository has zero stars, one fork, and one watcher, providing little supporting evidence of broad review or community involvement. Low popularity alone is not decisive, but it reinforces the maintenance uncertainty.

Repo tooling

Composer build tooling is present, but no security-scanning tools were detected. This is a modest transparency and maintenance gap rather than evidence that the package is unsafe.