railken/lara-ore-invoice

Release historycaution

The latest release was in March 2020, with no releases in the following 12 months of observed history; this is roughly six years of release inactivity and materially raises abandonment risk.

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers over the last three months, consistent with the long release gap and leaving little evidence of current maintenance.

Repo package mentioncaution

The repository name does not match the package name and its README does not mention the package, so the linkage is not clearly transparent even though name differences can occur in package layouts.

Security policycaution

No security policy was found in the linked repository, reducing the project's transparency for reporting and handling security issues.

Workflow auditcaution

All six analyzed action references are unpinned, and the audit found a high-confidence high-severity unpinned container image in test.yml; the workflows otherwise lack untrusted triggers and top-level write permissions.