fond-of-oryx/gift-card-proportional-value-no-payment-connector

Release historycaution

The latest release was in January 2023, with no releases in the last 12 months and only two releases overall. This is meaningful evidence of stale publishing activity, although the linked repository was pushed more recently.

Repo commit activitycaution

There were no commits and no active maintainers in the last 3 months. Combined with the old registry release history, this raises maintenance and abandonment concerns.

Repo toolingcaution

The repository uses Composer and Make, but no security scanning tool was detected. That is a transparency and maintenance-hygiene gap, not evidence that the package is unsafe.

Security policycaution

The repository has no security policy, leaving vulnerability reporting and disclosure expectations unclear. This is a moderate transparency gap for a dependency.

Workflow auditcaution

The single workflow was fully analyzed with no high-confidence audit findings or untrusted-trigger sinks, but all 3 of its action references are unpinned. The missing top-level permissions block is acceptable on its own.