pnscripts/pn-invoice

Release historycaution

The package is only 1 day old with 2 releases and a roughly 1-day median release interval, so there is not yet enough history to demonstrate sustained maintenance.

Repo commit activitycaution

The repository reports 0 commits and 0 active maintainers over the last 3 months; given the package is only 1 day old, this is mainly limited evidence rather than proof of abandonment.

Repo toolingcaution

Composer build tooling is present, but no security scanning tools were detected, leaving security-maintenance coverage unconfirmed.

Version stabilitycaution

Version v0.2.0 is not a stable major release, which signals an early API with potential compatibility changes, although it is not marked as a prerelease.

Workflow auditcaution

The only workflow was fully analyzed, uses read-only permissions, and has no untrusted checkouts or injection findings. However, all 4 action references are unpinned, leaving builds exposed to reference changes.