youniwemi/digital-invoice

Dependency profilecaution

Six runtime dependencies make the package a relatively deep wrapper, increasing transitive maintenance exposure compared with a self-contained library, though the dependencies fit its stated invoice-format integrations.

Repo bus factorcaution

All 3 commits in the last 3 months came from one contributor, leaving maintenance dependent on a single active individual despite organization ownership.

Security policycaution

The repository has no security policy, reducing transparency for reporting and handling vulnerabilities in an invoice-processing library.

Version stabilitycaution

Version 0.3.2 is not marked prerelease, but the package remains below 1.0, so its API may still change more than a mature major release.

Workflow auditcaution

The workflow scopes permissions read-only and has no dangerous audit findings, but all 3 action references are unpinned, leaving build inputs less reproducible and more exposed to upstream action changes.