bitbag/braintree-plugin

Documentation, tests, and release notes make the integration easier to assess. The project is backed by an organization and remains unarchived, but its maintenance activity has stopped since September 2024.

Latest v2.0.0

Packagist

62%

Total Score

Maintainer Stability

Dependencies

100

Maturity

Supply Chain

Health Score Breakdown

Release history

The package has existed since December 2018 with six releases, but there have been no releases in the last 12 months and the latest release was in September 2024. This indicates a meaningful maintenance slowdown for a payment integration.

Repo commit activity

The repository recorded zero commits and zero active maintainers during the last three months. Combined with no registry releases in the last 12 months, this is the main abandonment concern.

Repo tooling

Composer build tooling is present, but no security scanning tools were detected. This is a transparency and maintenance-process gap, though it is not severe on its own.

Security policy

No repository security policy was found. For a payment integration, the absence reduces vulnerability-reporting transparency, but it does not by itself show that the release is unsafe.

Workflow audit

The single workflow was fully analyzed with no untrusted checkouts or script injection, but all 8 action references are unpinned. The three low-confidence cache-poisoning findings are hygiene concerns only under the audit rules.