korozcolt/payments-core

Release historycaution

The package is 0 days old with only 2 releases, published about 2 hours apart. This is too little history to establish dependable maintenance, though it is not evidence of abandonment by itself.

Repo commit activitycaution

There were 0 commits and 0 active maintainers in the last 3 months. Because the package itself is only 0 days old, this mainly means maintenance capacity is not yet demonstrated rather than clearly collapsed.

Security policycaution

The repository has no security policy. That weakens the documented process for reporting vulnerabilities, which matters for a package handling payment integrations.

Workflow auditcaution

The single workflow was fully analyzed with no audit findings or untrusted checkouts, but both action references are unpinned. That leaves a modest reproducibility and action-supply-chain hygiene gap.