silarhi/zugferd-factur-x
The repository includes tests, matching source and package names, an MIT license, and automated dependency scanning. Workflow references are unpinned and no security policy is provided, which adds maintenance and build-integrity concerns.
57%
Total Score
75
94
75
Health Score Breakdown
Only two releases exist, both published about 2 years 7 months ago, with no releases in the last 12 months. The repository was pushed more recently, but the package release cadence remains a meaningful maintenance concern.
The repository recorded zero commits and zero active maintainers in the last 3 months. The recent push date is some compensating evidence, but observed recent development activity is absent.
No repository security policy was found. This is a transparency gap for reporting and handling security issues, though it does not by itself make the package unfit.
The single workflow was fully analyzed with no dangerous triggers, untrusted checkouts, or audit findings. However, both referenced actions are unpinned, leaving a build-integrity hygiene concern.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
 Patrick Romowicz |
| SILARHI |
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 jms/serializer Version ^3.18 | — | — |
Weekly Downloads
Info
- Last Published
- 2 years ago
- Created
- 2 years ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.