a4hmad1/fib-laravel-payment-sdk

Release historycaution

This is the package's first release, published today, so there is no release cadence or long-term maintenance record to assess.

Repo commit activitycaution

The repository has 0 commits and 0 active maintainers in the last 3 months; because the repository is newly published, this is limited evidence rather than proof of abandonment.

Security policycaution

The repository has no security policy, leaving vulnerability-reporting expectations undocumented for a payment integration package.

Workflow auditcaution

All 4 analyzed action references are unpinned, and the audit reports a high-confidence template-injection finding in release.yml. The workflows have no untrusted checkout or script-injection findings, so this is a hygiene and release-integrity concern rather than a severe standalone risk.