levizwannah/mpesa-sdk-php

Maintainerscaution

Only one registry account can publish the package, which creates continuity risk, though the linked repository shows that the same owner is actively maintaining it.

Repo bus factorcaution

One contributor made all two commits in the last three months, so maintenance has a single-person bus factor with no active second contributor to provide resilience.

Repo issue activitycaution

There are no open issues or pull requests, and no recent issue or pull-request activity. This is not evidence of abandonment by itself, but it provides little evidence of an active user or contributor community.

Repo toolingcaution

Composer is used for builds, but no security scanning tools are configured. The missing scanning is a modest assurance gap rather than evidence of unsafe code.

Security policycaution

The repository has no security policy, leaving the process for reporting and handling vulnerabilities undocumented.