conedevelopment/billingo-php

Release historycaution

The package has 5 releases over about 2 years and a median interval of about 38 days, but no releases in the last 12 months. That prolonged registry inactivity is a meaningful maintenance concern.

Repo commit activitycaution

The repository recorded 0 commits and 0 active maintainers in the last 3 months. This is a strong sign that active development has paused, even though the repository is not archived.

Repo toolingcaution

Composer is used for builds, but no security scanning tools are configured. The missing scanning is a modest repository hygiene gap rather than evidence of abandonment.

Security policycaution

The repository has no security policy. For an SDK that handles API credentials, this reduces transparency about vulnerability reporting and response.

Workflow auditcaution

The single analyzed workflow has no untrusted checkout or script-injection findings, but all 4 action references are unpinned and the workflow grants top-level write access. These are supply-chain hygiene weaknesses without a demonstrated dangerous sink.