backendprogramer/snapp-pay

Release historydanger

The package has had no releases in the last 12 months, and its latest release is more than two years old. Only four releases provide limited evidence of sustained maintenance.

Repo commit activitydanger

The repository recorded zero commits and zero active maintainers in the last three months, reinforcing the prolonged release gap and indicating likely abandonment risk.

Repo issue activitycaution

There were no new or closed issues or pull requests in the last month, while three pull requests remain open; this suggests limited recent project response.

Security policycaution

The repository has no security policy, leaving vulnerability reporting and disclosure expectations undocumented for a payment integration package.

Workflow auditcaution

All nine action references are unpinned, three workflows grant top-level write permissions, and a high-confidence bot-condition finding affects the Dependabot auto-merge workflow. The pull_request_target trigger has no untrusted checkout or script-injection sink, limiting the severity.