kryptonpay/itau-sdk

Release historycaution

There has been only one release, published about 10 months ago, so there is little evidence of an established release process. The repository is still available and not archived, which partly offsets the maturity concern.

Repo commit activitycaution

The repository had zero commits and zero active maintainers in the last three months, despite being created or released about 10 months ago. The single release and organization ownership do not compensate for the absence of recent observed work.

Repo package mentioncaution

The repository name does not match the package name and its README does not mention the package, so the link between the published package and source repository is not clearly established. Organization backing and matching namespace reduce, but do not remove, that concern.

Repo toolingcaution

Composer is used as the build tool, which fits the package ecosystem, but no security scanning tools were detected. This is a modest transparency and maintenance gap rather than a severe risk.

Security policycaution

The repository has no security policy, leaving vulnerability reporting and response expectations undocumented. The package is an SDK with network-related dependencies, so this gap is relevant.