dbp/relay-mono-connector-payone-bundle

Dependency profilecaution

The package declares 24 runtime dependencies, including framework, database, payment SDK, and integration components; this is substantial dependency surface and increases upgrade and transitive-risk complexity, though it is consistent with the connector's functionality.

Lifecycle scriptscaution

The package uses a post-autoload-dump install lifecycle script. This is a potentially consequential install hook, but only one standard Composer hook is reported and no dangerous behavior is shown by the available signals.

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers in the last three months. Recent releases and five merged pull requests provide some counter-evidence, but the lack of recent commit activity is a meaningful maintenance concern.

Repo popularitycaution

The repository has zero stars and forks and three watchers. This is weak adoption evidence, but popularity is supporting evidence rather than a health verdict and does not outweigh the package's release and project structure.

Repo toolingcaution

Composer build tooling is present, but no security scanning tools were detected. The missing scanning capability is a repository-security hygiene gap rather than evidence of abandonment.