joogopay/sdk

Release historycaution

The package is only 10 days old, despite six releases in that period. The rapid recent cadence is encouraging, but there is not yet enough history to establish long-term maintenance.

Repo bus factorcaution

One contributor made all four recent commits, creating a narrow maintenance base. Organization ownership provides some handoff capacity, so this is a caution rather than a severe abandonment risk.

Repo commit activitycaution

Four commits were made in the last three months, showing some activity, but all activity is concentrated in the current short-lived project history.

Repo toolingcaution

Composer build tooling is present, but no security scanning tools were detected. The missing scanner is a modest transparency and hygiene gap.

Security policycaution

The repository has no security policy. For an SDK handling signatures, encryption, and merchant credentials, that leaves vulnerability-reporting expectations unclear.