thoth-pharaoh/ecpay-invoice
A single individual backs a very small project, and it has no security policy or automated security scanning. The package still includes clear documentation and a changelog, with a lean dependency set and no install-time scripts.
62%
Total Score
50
100
94
75
Health Score Breakdown
Only one registry account has publish access. With the repository owned by an individual rather than an organization, this indicates limited publishing and maintenance redundancy.
The repository recorded zero commits and zero active maintainers in the past three months. Although the latest release was more recent, the current absence of development activity raises maintenance risk.
The repository uses Composer, but no security scanning tools were detected. This is a modest transparency and maintenance-hygiene gap for a package handling invoicing integrations.
The repository has no security policy, leaving no documented channel or process for reporting vulnerabilities.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
 Nick Zhang |
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 illuminate/support Version >=9.0 | — | — |
Weekly Downloads
Info
- Last Published
- 10 months ago
- Created
- 4 years ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.