bulletdigitalsolutions/doctrine-cashier

Dependency profilecaution

The package has seven runtime dependencies, including framework, ORM, and payment-related components. This is a meaningful integration surface, but not unusually large for the package's stated functionality.

Package scaffoldingcaution

The artifact includes a README, tests, and a changelog, while the repository also has tests and a changelog. The README itself says the package is early-stage and not tested for production use, which limits confidence for production adoption.

Repo bus factorcaution

All 10 recent commits came from one contributor, giving the project a concentrated maintenance base. Organization backing provides some handoff capacity, but no second active contributor is shown.

Repo toolingcaution

Composer build tooling is present, but no security-scanning tool was detected. That leaves security checks less transparent than they could be.

Security policycaution

The repository has no security policy. This is a transparency and incident-reporting gap, though it is not evidence that the package is unsafe.