chargebee/cashier

Repo bus factorcaution

One contributor made all two recent commits, concentrating current maintenance. Organization backing provides some handoff capacity, but no second active contributor is shown.

Repo commit activitycaution

Only two commits were made in the last three months, showing limited recent activity even though the package has a recent release.

Workflow auditcaution

The single workflow was fully analyzed, uses read-only permissions, and has no untrusted checkout or script-injection findings. However, all five action references are unpinned, leaving avoidable version-drift and action-substitution risk.