felixmuhoro/laravel-mpesa-subscriptions

Package file treecaution

Both the artifact and repository contain only composer.json and src/ServiceProvider.php, leaving little visible implementation or project documentation to establish maturity.

Package scaffoldingcaution

The package has no README, tests, or changelog. Missing tests and changelog are normal for published artifacts, but the absent README is a documentation gap for a Laravel integration package.

Release historycaution

Only one release exists, published 105 days ago, so there is limited evidence of sustained maintenance; the package is still relatively young, which partly explains the short history.

Repo toolingcaution

Composer is used as the build tool, which fits the package ecosystem, but no security scanning tooling is present; this is a modest transparency gap rather than a severe risk.

Security policycaution

The repository has no security policy. That weakens disclosure transparency for a package handling recurring payment integration, although it does not by itself show unsafe code.