boltpay/bolt-magento2

Licensecaution

The manifest declares MIT and license files are present, but the repository license detection identifies OSL-3.0, creating a material licensing mismatch that should be resolved before adoption.

Release historycaution

The package has 85 releases over more than eight years, but none in the last 12 months; this weakens confidence in current release maintenance despite recent repository activity.

Repo issue activitycaution

There are no open issues and three new pull requests in the last month, but none were merged during that period; this is a minor maintenance concern alongside the active commits.

Security policycaution

The repository has no published security policy, leaving vulnerability reporting and handling expectations unclear for a payment integration.

Workflow auditcaution

The single workflow was fully analyzed with no injection or high-severity findings, but all five action references are unpinned, reducing build reproducibility.