laulamanapps/google-wallet

Release historycaution

The package is young at 73 days and has only two releases, so long-term maintenance consistency is not yet established; however, the releases were only about 5 days apart and recent activity is present.

Repo popularitycaution

The repository has zero stars, forks, and watchers. This is weak supporting evidence, but it does not outweigh the observed maintenance and project structure.

Repo toolingcaution

Composer build tooling is present, but no security scanning tool was detected, leaving a modest repository hygiene gap.

Security policycaution

The repository has no security policy, which makes vulnerability reporting and coordinated disclosure less transparent for a package handling signed wallet data and service-account integrations.

Workflow auditcaution

The sole workflow was fully analyzed with no dangerous triggers, untrusted checkouts, script injection, or audit findings. However, all four action references are unpinned, weakening build reproducibility and action-supply-chain hygiene.