ccatpay/php_sdk

Maintainerscaution

One registry maintainer publishes the package, and the repository is owned by the same account. This is coherent ownership but provides limited maintainer redundancy.

Project backingcaution

The registry namespace and repository owner match, but the owner is an individual account rather than an organization, so there is no visible organizational backing to compensate for the thin maintainer base.

Release historycaution

Only two releases exist, with no release in roughly two and a half years and none in the last 12 months. This materially weakens evidence of ongoing maintenance.

Repo commit activitycaution

There were no commits and no active maintainers in the last three months. Together with the old last push, this indicates little current maintenance capacity.

Repo toolingcaution

Composer is used for the build, which is appropriate for a PHP package, but no security scanning tool is configured, leaving a modest transparency gap.