devinweb/laravel-youcan-pay

Release historycaution

The latest release was about 3 years and 2 months ago, with no releases in the last 12 months. This is strong evidence of stalled maintenance despite seven releases overall.

Repo commit activitycaution

There were no commits and no active maintainers in the last 3 months, consistent with the release gap and indicating that current maintenance capacity is weak.

Security policycaution

No repository security policy is present. This is a transparency gap for a payment integration, although the available tooling provides some compensating evidence.

Version stabilitycaution

Version 0.4.3 is not a prerelease, which supports using this release, but the package remains on a pre-1.0 major version and may carry compatibility risk.

Workflow auditcaution

Both workflows were analyzed without failed files, dangerous triggers, untrusted checkouts, script injection, or audit findings. However, all six action references are unpinned, leaving avoidable build-reproducibility risk.