sandwave-io/vat

Registry deprecationdanger

Packagist marks the entire package as abandoned, with no replacement provided. Package-level deprecation is a severe adoption risk rather than a cosmetic metadata gap.

Release historydanger

The package has only five releases and none in the last 12 months; its latest release was in March 2023. This indicates a prolonged lack of registry maintenance, although the moderate historical release interval provides limited evidence of prior activity.

Repo commit activitydanger

The repository recorded zero commits and zero active maintainers in the last three months. Together with the archived status, this confirms that current maintenance capacity is absent.

Repository archiveddanger

The linked repository is archived, despite being pushed in October 2024, so it is no longer an active maintenance target. This strongly increases the risk that defects and compatibility issues will remain unresolved.

Security policycaution

The repository has no security policy, leaving no documented channel or process for reporting vulnerabilities. This is a transparency gap, especially for a package that validates and retrieves tax data.