fond-of-oryx/payment-address-restrictions

Release historycaution

The package has had no release in over three years, despite five releases since March 2022; this is meaningful evidence of slowing maintenance.

Repo commit activitycaution

The repository recorded no commits and no active maintainers in the last three months, consistent with limited current maintenance capacity.

Repo package mentioncaution

The repository name does not match the package name and its README does not mention the package, so the source association is less transparent even though the organization matches.

Security policycaution

The repository has no security policy, leaving vulnerability reporting and response expectations undocumented.

Workflow auditcaution

All three analyzed action references are unpinned, which weakens build reproducibility. The audit found no untrusted checkout, script injection, or high-confidence security finding.