chamikasamaraweera/payhere-php-sdk

Repo commit activitydanger

There were zero commits and zero active maintainers in the last three months, indicating that maintenance activity has currently stopped.

Project backingcaution

The package and repository are owned by the same individual account, so ownership is clear, but there is no organization backing to broaden maintenance capacity.

Release historycaution

This is the only release, published about seven months ago, so there is little history to establish sustained maintenance or compatibility stability.

Repo toolingcaution

Composer build tooling is present, but no security scanning tools were detected. The missing scanning is a modest repository-hygiene gap, partly offset by the repository's security policy.

Workflow auditcaution

Both workflows were analyzed without high-confidence findings, dangerous triggers, untrusted checkouts, or script injection. However, all four action references are unpinned, leaving them exposed to upstream action changes.