gocardless/gocardless-pro-php

Registry deprecationdanger

Packagist marks the entire package as abandoned and names gocardless/gocardless-pro as its replacement; this is a major dependency and continuity concern.

Repo bus factorcaution

Three contributors were active, but one made 80% of recent commits; organization backing partly reduces the handoff risk, though activity remains concentrated.

Repo toolingcaution

The project uses Make and Composer, but no security scanning tools were detected; this is a modest transparency and hygiene gap.

Workflow auditcaution

All three workflows were analyzed, but all three action references are unpinned and two workflows grant top-level write access. A medium-confidence high-severity bot-condition finding also warrants caution, although no untrusted checkout or script injection was found.