bilions/2c2p-php

Release historydanger

The latest release was about four years ago, with no releases in the last 12 months and only three releases overall. This is strong evidence of abandonment risk for a library dependency.

Repo commit activitydanger

The repository recorded zero commits and zero active maintainers over the last three months, consistent with the long release gap. No provided signal shows recent maintenance to offset this.

Repo popularitycaution

The repository has only 2 stars and no forks or watchers, providing little evidence of a broad user or contributor base. Popularity is supporting evidence rather than decisive on its own, but it reinforces the maintenance concern.

Security policycaution

The repository has no security policy. For a payment SDK, this reduces the transparency of vulnerability reporting and response expectations.

Workflow auditcaution

The single workflow was fully analyzed, uses read-only permissions, and has no audit findings, but both action references are unpinned. That is a modest reproducibility and supply-chain hygiene gap, not a severe risk by itself.