gingdev/ipay

Release historycaution

The package has only three releases and none in the last 12 months; its latest release was about 19 months ago. This points to slowing maintenance, though the release history is not extremely short.

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers in the last three months, consistent with about 19 months since the last push. This is a meaningful abandonment concern for a package intended as an API client.

Repo popularitycaution

The repository has three stars and no forks, indicating a small user and contributor base. Popularity is supporting evidence rather than a verdict, but it provides little evidence of external maintenance capacity.

Security policycaution

The repository has no security policy, leaving no documented channel or process for reporting security issues. This is a transparency gap, although it does not by itself show an unsafe release.

Workflow auditcaution

Both workflows were analyzed successfully with no reported audit findings, and one uses read-only permissions. All three referenced actions are unpinned, which weakens build reproducibility and supply-chain hygiene.