arklemx/orange-money

Release historydanger

This is the package's only release, published in January 2023, with no releases in the last 12 months. The long period without a new release is a meaningful abandonment concern for a payment integration.

Repo commit activitydanger

The repository recorded zero commits and zero active maintainers in the last three months, while its last push was in January 2023. That indicates maintenance has been inactive for more than three years.

Security policycaution

The repository has no security policy. For a package handling payment integration, this reduces transparency around vulnerability reporting and maintenance response.

Workflow auditcaution

The single analyzed workflow has no untrusted checkout or injection findings, but its only action reference is unpinned. That leaves the build exposed to changes in the referenced action and is a modest supply-chain hygiene gap.