codeplugtech/dodo-payments

Repo commit activitycaution

The repository recorded 0 commits and 0 active maintainers in the last 3 months, a meaningful maintenance warning, although the package had a release at the start of that period.

Repo toolingcaution

Composer build tooling is present, but no security scanning tool was detected, leaving security hygiene less transparent for a payment integration.

Security policycaution

The repository has no security policy, which reduces the documented path for reporting vulnerabilities in a package handling payment and webhook integrations.

Version stabilitycaution

Version 0.0.9 is not a stable-major release, so its pre-1.0 status leaves more room for breaking changes despite the absence of prerelease versions.

Workflow auditcaution

The only workflow was fully analyzed with no dangerous triggers, untrusted checkouts, or audit findings, but both of its 2 action references are unpinned; this is a supply-chain hygiene gap rather than a severe risk.