pondersource/invoice-ubl

Release historydanger

The latest release was published in April 2022, more than four years ago, and there have been no releases in the last 12 months. This is strong evidence of a stagnant release process.

Repo commit activitydanger

The repository recorded 0 commits and 0 active maintainers in the last 3 months. Combined with the old latest release, this raises meaningful abandonment risk.

Repo toolingcaution

Composer build tooling is present, but no security scanning tools were detected. That is a modest maintenance and review gap rather than a severe risk.

Security policycaution

The repository has no security policy. This is a transparency gap for a library handling structured invoice data, though it does not by itself show that the package is unsafe.