djalone/kkm-server-classes

Lifecycle scriptscaution

The package runs post-install and post-update scripts, which increase installation-time behavior and review overhead. No provided signal shows that these scripts are unsafe, so this is a moderate hygiene concern rather than a severe risk.

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers during the last three months. This weakens evidence of ongoing maintenance despite the package's frequent release history.

Repo toolingcaution

The repository uses Composer build tooling, but no security scanning tools were detected. For a package handling payment-terminal integrations, the missing security automation is a modest transparency and maintenance gap.

Security policycaution

No security policy was found in the repository. This makes vulnerability reporting and disclosure expectations less clear, though it does not by itself show that the package is unsafe.