felixmuhoro/laravel-mpesa-escrow

Maintainerscaution

One registry maintainer is consistent with an independently owned package, but it leaves little demonstrated maintainer redundancy for a payment-related dependency.

Package file treecaution

The package and repository each contain only composer.json and src/ServiceProvider.php, indicating a minimal implementation with little surrounding documentation or verification material.

Package scaffoldingcaution

The artifact has no README, tests, or changelog. Missing tests and changelog are normal for published artifacts, but the missing README matters for a Laravel integration that consumers must configure and use.

Release historycaution

This package has only one release over 108 days, so there is little evidence of an established release or maintenance cadence. Its young age partly explains the limited history, but does not establish ongoing support.

Security policycaution

The linked repository has no security policy, leaving no documented channel or process for reporting vulnerabilities. This is a transparency gap, though not evidence of an active defect.