breviam/mpesa-sdk

Release historycaution

The package has only 3 releases, all clustered within about 15 minutes, and none in the last 12 months despite being about 15 months old. This suggests limited demonstrated maintenance capacity.

Repo commit activitycaution

The repository recorded 0 commits and 0 active maintainers in the last 3 months, consistent with the long pause since its last push. That raises the risk that fixes or compatibility updates may not arrive promptly.

Workflow auditcaution

All 11 analyzed action references are unpinned, which weakens build reproducibility; the cache-poisoning findings are low-confidence and therefore add little weight on their own. The workflow was fully analyzed and showed no untrusted checkout or script-injection path.