academe/opayo-pi

Licensecaution

The manifest declares MIT, while the artifact license file is detected as GPL-3.0; the repository also contains a license file, so this is a genuine licensing inconsistency rather than a missing-license gap.

Repo bus factorcaution

All 12 recent commits came from one contributor, which creates continuity risk; organization ownership provides some ability to hand maintenance to another contributor.

Repo toolingcaution

Composer build tooling is present, but no security scanning tools were detected, leaving a modest transparency and maintenance gap.

Security policycaution

The repository has no security policy, which makes vulnerability reporting and response expectations less transparent for a payment-related library.