ahmedlaggoun/moyasar

Release historycaution

The package is only 38 days old with three releases, so its maintenance record is still too short to establish long-term reliability; rapid releases about 13 hours apart show active initial development.

Repo bus factorcaution

One contributor accounts for 100% of the three recent commits. The linked repository is user-owned rather than organization-backed, so there is no shown handoff capacity to offset this concentration.

Repo commit activitycaution

The repository has three commits in the last three months, all from one active maintainer. This shows recent activity but provides little evidence of sustained maintenance capacity.

Security policycaution

The repository has no security policy. That is a meaningful transparency gap for a payment integration, although it does not by itself show that the package is unsafe.

Workflow auditcaution

The single workflow was fully analyzed with no untrusted checkouts, injection findings, or excessive permissions, but both of its two action references are unpinned, leaving avoidable build-integrity drift risk.