kaiorocha/cambioreal

Licensecaution

The manifest declares MIT, while the artifact license file is recognized as BSD-3-Clause. A license file exists, but the mismatch creates avoidable legal ambiguity.

Release historycaution

The package is 487 days old but has had no releases in the last 12 months; its four releases arrived within a brief initial burst. This points to a meaningful maintenance-risk gap.

Repo commit activitycaution

There were zero commits and zero active maintainers in the last three months, consistent with the absence of releases during the last year. This materially raises abandonment risk.

Repo toolingcaution

Composer is used for the build, but no security scanning tools are present. The missing scanning is a hygiene gap rather than evidence that the package cannot be maintained.

Security policycaution

The repository has no security policy. For a payment-related integration library, this reduces transparency about vulnerability reporting and maintenance expectations.