rocketfellows/specific-country-vat-number-format-validators-config

Release historycaution

This package has only one release, published over three years ago, with no releases in the last 12 months. That is a meaningful maintenance concern for a dependency, though the package may be intentionally stable.

Repo commit activitycaution

There were no commits and no active maintainers in the last three months, consistent with a repository that has seen no activity since its initial release.

Repo toolingcaution

The repository uses Composer build tooling, but no security scanning tools were detected. This is a modest transparency and maintenance gap rather than a severe risk.

Security policycaution

No repository security policy was found, leaving vulnerability-reporting expectations undocumented. This is a minor transparency concern for a small package.

Workflow auditcaution

The single workflow was fully analyzed with no dangerous triggers, sinks, or audit findings, but all 12 action references are unpinned. That weakens build reproducibility and supply-chain hygiene.