flux-se/payum-stripe-bundle

Release historycaution

The package has existed for about 6 years with 10 releases, but only one release in the last 12 months; this suggests slower maintenance rather than abandonment on its own.

Repo commit activitycaution

There were zero commits and zero active maintainers in the last 3 months. The recent release and repository push provide some counterevidence, but ongoing development capacity still appears thin.

Repo toolingcaution

Composer build tooling is present, but no security scanning tools were detected; this is a modest transparency and hygiene gap rather than a dependency-blocking risk.

Workflow auditcaution

All 3 workflow action references are unpinned, weakening build reproducibility. The reported cache-poisoning issue has low confidence and is hygiene at most; the audit otherwise analyzed the single workflow completely.