digitickets/omnipay-bambora

Name lookalikedanger

The package borrows the identity of the much more established digitickets/lalit package, with borrows_lookalike_identity true and 224 versus 152,079 monthly downloads. Although artifact overlap is zero, this remains strong evidence that consumers may have intended the lookalike package.

Release historydanger

The latest release was in June 2018, with no releases in the last 12 months and six releases total. The package is about eight years old without recent registry maintenance.

Repo commit activitydanger

The repository recorded zero commits and zero active maintainers in the last three months, consistent with a project that has been inactive for years.

Repo popularitycaution

The repository has one star and no forks, providing little supporting evidence of broad review or active community use. Popularity is only supporting evidence, so this is a secondary concern.

Repo toolingcaution

Composer build tooling is present, but no security scanning tools are configured. The missing scanning is a transparency and maintenance gap for a payment gateway integration.