prometee/vies-client

Release historycaution

The package has nine releases since 2018, but none in the last 12 months and the latest release was nearly 19 months ago. This indicates slowed maintenance, though the project has an established release history.

Repo commit activitycaution

There were zero commits and zero active maintainers in the last three months. This is a concrete sign of currently quiet maintenance and raises the chance that issues or compatibility work will wait.

Security policycaution

The repository has no security policy. This is a transparency gap for a library that handles external VAT-service requests, although the other project signals provide some supporting structure.

Workflow auditcaution

All three workflow action references are unpinned, weakening build reproducibility. The only audit finding is low-confidence cache-poisoning hygiene, so it does not warrant a severe penalty on its own.