robertov8/nfs-e

The package is clearly licensed, includes a readable artifact, and avoids install-time scripts. Its small project footprint and absent security process leave little evidence of ongoing support or release oversight.

Latest 1.1

Packagist

43%

Total Score

Maintainer Stability

Maturity

Supply Chain

Health Score Breakdown

Release history

Only two releases were published, both in August 2023, with no releases in roughly three years. This is strong evidence of abandonment for a package expected to receive maintenance.

Repo commit activity

The repository recorded zero commits and zero active maintainers in the last three months, consistent with the long release gap and leaving no recent maintenance evidence.

Repo package mention

The repository name does not match the package name and its README does not mention the package, so the source-package relationship is not clearly established.

Repo tooling

Composer is used for builds, but no security-scanning tool is present. This is a modest supply-chain hygiene gap, not evidence of malicious behavior by itself.

Security policy

The linked repository has no security policy, reducing transparency for reporting and handling security issues in a package that processes electronic invoice data.