kevin-kibet/payum-mpesa

Release historydanger

The package has only two releases, both from March 2019, with no releases in the last 12 months. This long release gap is a substantial maintenance concern for a payment integration.

Repo commit activitydanger

The repository recorded zero commits and zero active maintainers during the last three months, consistent with the package's multi-year release inactivity. This is strong evidence of abandonment risk.

Repo toolingcaution

Composer is used for the build, but no security-scanning tools are configured. The missing scanning is a transparency gap, although it is secondary to the project's much older maintenance problem.

Security policycaution

The repository has no security policy. For a payment integration, the lack of documented vulnerability-reporting guidance is a genuine transparency gap.

Version stabilitycaution

Version 0.1.1 is not a stable major release, indicating an immature API with potentially limited compatibility guarantees. No prerelease versions are present, which provides only minor compensation.