silassare/gobl

Lifecycle scriptscaution

The package runs post-install-cmd and post-update-cmd scripts, which add install-time behavior and therefore warrant review before use. No other provided signal shows that these scripts are unsafe or unnecessary.

Release historycaution

The package has 21 releases but none in the last five years, with the latest release on May 15, 2021. The recent repository push is some evidence of ongoing attention, but it does not replace a current package release.

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers in the last three months. This conflicts with the recent push timestamp and leaves current maintenance capacity uncertain, so it is a meaningful maintenance concern.

Repo issue activitycaution

There are no open issues and one open pull request, but no issues or pull requests were closed in the last month. This provides little evidence of active development.

Security policycaution

The repository has no security policy. This is a transparency gap for a database and ORM library, although the available tooling and workflow findings provide some compensating process evidence.