ingenico/direct-sdk-php

Licensecaution

The artifact includes a license file and declares MIT, but the detected text also includes BSD-3-Clause, which is not covered by the declaration and creates a transparency mismatch.

Repo bus factorcaution

All seven recent commits came from a single contributor, creating a genuine continuity risk; organization ownership provides some ability to hand maintenance off but no second active contributor is shown.

Repo commit activitycaution

Seven commits were made in the last 3 months, so activity has not stopped, but the pace is modest and all commits came from one active maintainer.

Repo package mentioncaution

The repository name does not match the package name and its README does not mention the package, so the linkage is less transparent and the repository could be serving a related or differently named project.

Security policycaution

The repository has no SECURITY.md policy, which weakens vulnerability-reporting transparency for a payment-processing SDK.