astral-php/astral-payment

Project backingcaution

The registry namespace and repository owner match, and the owner is reported as a user rather than an organization. This provides package ownership alignment but no broader organizational backing.

Release historycaution

The package is less than one day old, with three releases in the last 12 months and a median interval of about 32 minutes. This shows active initial publishing but provides no meaningful long-term maintenance record.

Repo commit activitycaution

There were no commits or active maintainers in the previous three months. Because the package is brand new, this is partly expected, but it leaves no established maintenance history.

Repo toolingcaution

Composer build tooling is present, but no security scanning tools are reported. For a package handling payment and webhook code, that is a meaningful security-maintenance gap.

Security policycaution

The repository has no security policy. This weakens the documented process for reporting and handling vulnerabilities in payment-related code.