The package includes tests, has no runtime dependencies, and uses no install-time scripts. Its single release is from April 2018, the consumer-facing README is missing, and the repository could not be found, leaving maintenance and provenance unverified.
35%
Total Score
50
100
50
100
There has been only one release, on April 24, 2018, with no releases in the last 12 months. This strongly indicates abandonment risk despite the package not being deprecated.
The registry lists one maintainer account. This does not prove inactivity, but combined with the single release and lack of recent releases it provides little evidence of continued maintenance capacity.
Tests are included, which is a small positive, but the package has no README for consumers. For a library described as an invoice package, that missing usage documentation is a real adoption gap.
Version 0.0.0 is not a stable major release, which signals limited maturity; the absence of prerelease labeling does not compensate for the package's single-release history.
We didn't find any vulnerabilities for this package.
No direct dependencies.
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.