quittio/core

Release historycaution

This package is brand new: it has one release and is only 0 days old, so there is no release cadence or long-term maintenance record yet.

Repo bus factorcaution

All recent commits come from one contributor, creating a concentrated maintenance dependency. Organization backing partly compensates by providing a broader ownership context.

Repo commit activitycaution

Two commits in the last 3 months show some activity, but this is too little history to demonstrate an established maintenance pattern.

Repo toolingcaution

Composer build tooling is present, but no security scanning tools were detected. This is a modest transparency gap for a package handling invoice formats and validation.

Security policycaution

The repository has no security policy, leaving vulnerability-reporting expectations undocumented.