bickyraj/hbl

Maintainerscaution

A single registry publisher limits redundancy, but the repository is owned by the same individual, so the narrow maintainer base is consistent with this small user-backed project.

Package scaffoldingcaution

The package has no README, which is a meaningful gap for a payment library that consumers must integrate. The missing tests and changelog are not concerns for the published artifact, while the GitHub release indicates some release documentation practice.

Repo commit activitycaution

There were no commits and no active maintainers in the last three months, despite the latest release being in February 2026. This weakens evidence of ongoing development and increases maintenance risk.

Repo popularitycaution

The repository has only 1 star and 2 forks, providing little external adoption or community validation. This is supporting evidence rather than a standalone failure for a small package.

Repo toolingcaution

Composer is used for the build, but no security scanning tools are configured. The missing scanning is a transparency and maintenance gap for a payment-related library, though it is not evidence of malicious behavior.