chenpkg/cmb

Dependency profilecaution

Eight runtime requirements, including HTTP, event, cryptography, and support components, create ordinary maintenance exposure for a payment SDK but do not show an excessive dependency burden by themselves.

Maintainerscaution

Only one registry account has publish access. That creates a thin publishing base and increases continuity risk, though it is not evidence of current inactivity on its own.

Project backingcaution

The repository is owned by a personal GitHub account rather than an organization, so there is no visible organizational backing to compensate for the single maintainer and prolonged inactivity.

Release historycaution

The package has had no releases in the last 12 months, and its latest release was published in March 2022. That long release gap is a substantial maintenance concern for a payment SDK.

Repo commit activitycaution

The repository had zero commits and zero active maintainers in the last three months, with the last push in March 2022. This is the strongest evidence of prolonged abandonment risk.