blesta/gocardless

Licensecaution

The release includes an MIT license file, so it is licensed, but the manifest declares it as proprietary. That unresolved mismatch creates a real transparency and usage-risk concern.

Repo bus factorcaution

All recent commits came from one contributor. Organization ownership provides some handoff capacity, but no second recently active contributor is shown.

Repo commit activitycaution

There was one commit by one active maintainer in the last three months. Recent activity exists, but the very low volume limits evidence of sustained maintenance.

Security policycaution

The linked repository has no security policy. For a payment gateway, that is a transparency gap because it gives maintainers no documented route for reporting security issues.