alphaolomi/php-evpay

Release historycaution

The package has had no release in about three years, with zero releases in the last 12 months. Its three-release history shows some initial activity but provides little evidence of current maintenance.

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers in the last three months, while its last push was about two years ago. This is a meaningful abandonment concern despite the repository not being archived.

Security policycaution

The repository has no security policy, leaving vulnerability reporting and disclosure expectations undocumented. The README points to a security policy, but the repository indicator shows none is present.

Workflow auditcaution

All 14 analyzed action references are unpinned, and four workflows grant top-level write permissions. A high-confidence bot-condition finding is present, but there is no untrusted checkout or script injection, so these are workflow hygiene risks rather than a severe standalone threat.