aggreg82r/pay

Release historydanger

This is the only release, published about 4 years and 7 months ago, with no releases in the last 12 months. That is strong evidence of abandonment for a payment SDK.

Repo commit activitydanger

The repository recorded zero commits and zero active maintainers in the last 3 months, consistent with the package's long release gap. The repository is not archived, but there is no observed recent maintenance.

Package file treecaution

The artifact and repository each contain only four files, including a README and one source file. This may fit a small SDK, but it provides little evidence of maturity or maintenance depth.

Repo toolingcaution

Composer build tooling is present, but no security scanning tools are configured. That is a modest supply-chain hygiene gap rather than evidence that the package is unsafe.

Security policycaution

The linked repository has no security policy. For a package handling payment checkout integration, this reduces transparency around vulnerability reporting and response.