dotsplatform/cashback-api

Package scaffoldingcaution

The published library has no README, which makes integration harder, and the repository also reports no tests. The GitHub release notes for this version provide some change transparency, but they do not compensate for the missing consumer documentation and test coverage.

Repo bus factorcaution

All 17 recent commits came from one contributor, creating a meaningful single-person continuity risk. The repository owner is not identified as an organization, so there is no provided project-backing evidence to offset that concentration.

Repo popularitycaution

The repository has no stars or forks and only two watchers, providing little external adoption evidence. Popularity is supporting evidence only, so this lowers confidence in community scrutiny without making the package unfit.

Repo toolingcaution

The repository uses Composer for builds, but no security scanning tools were detected. This is a transparency and assurance gap rather than evidence that the package is unsafe.

Security policycaution

No security policy was found in the repository, leaving vulnerability reporting and response expectations undocumented.