bitbag/quadpay-plugin

Repo commit activitydanger

The repository recorded no commits and no active maintainers in the last 3 months, consistent with the roughly 2-year gap since the latest release. This raises abandonment risk.

Release historycaution

The package has existed since 2018 and has 8 releases, but it has had no release in the last 12 months; the latest release was about 2 years ago. This is a meaningful maintenance concern despite its established history.

Repo toolingcaution

The project uses Composer, but no security scanning tools were detected. For a payment integration, that is a transparency and maintenance gap.

Security policycaution

The repository has no security policy. This makes vulnerability reporting and response expectations less clear, particularly for a payment-related plugin.

Workflow auditcaution

All 7 analyzed action references are unpinned, which weakens build reproducibility. The reported cache-poisoning findings are low-confidence hygiene warnings and do not independently establish a severe workflow risk.