coreshop/payum-payment-bundle

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers in the last three months. This is a meaningful maintenance concern, although the recent release history provides some compensating evidence.

Repo package mentioncaution

The repository name does not match the package name and its README does not mention this package. That weakens transparency about whether the repository is the package's intended source, though the shared organization provides partial context.

Repo toolingcaution

The repository uses Composer, but no security-scanning tooling was detected. This is a modest security-hygiene gap rather than evidence that the release is unsafe.

Security policycaution

The repository has no security policy. This reduces transparency about vulnerability reporting and response, but it does not by itself indicate abandonment.