felixmuhoro/laravel-mpesa-api

Package file treecaution

The artifact and linked repository each contain only composer.json and src/ServiceProvider.php, indicating a very small implementation with limited visible project documentation or scaffolding. The narrow scope may explain the small tree, but it leaves maturity harder to verify.

Package scaffoldingcaution

The package has no README, while consumers of a Laravel library generally need installation and integration guidance. Missing tests and changelog files are normal for a published artifact and do not add concern here.

Release historycaution

This package has only one release, published 111 days ago, so there is little release history to demonstrate sustained maintenance. Its recent age avoids making this an abandonment finding on its own.

Repo toolingcaution

Composer is used for the build, which is appropriate, but no security-scanning tooling is present. This is a transparency and maintenance weakness rather than evidence that the package is unsafe.

Security policycaution

The linked repository has no security policy, reducing the documented path for reporting vulnerabilities. The small project size limits how severe this gap is.