arca/payment-gateways

Project backingcaution

The repository is owned by an individual user rather than an organization, so the single registry maintainer does not have organizational backing to compensate for the recent lack of commit activity.

Repo commit activitycaution

There were zero commits and zero active maintainers in the last 3 months. Recent publishing and the June repository push partly offset this, but the current maintenance pause is a meaningful abandonment concern.

Security policycaution

The repository has no security policy, leaving vulnerability reporting and response expectations undocumented for a package that handles payment integrations.

Version stabilitycaution

Version 1.2.1 is a stable, non-prerelease major version, but 64.7% of recent releases were prereleases, which adds some release-process uncertainty.

Workflow auditcaution

All 12 analyzed action references are unpinned, and three workflows grant top-level write access. The audit also found one high-confidence bot-conditions issue in the Dependabot auto-merge workflow; no untrusted checkout or script injection was detected.