levizwannah/pesapal-sdk-php

Maintainerscaution

One registry maintainer carries publishing responsibility, leaving a thin maintainer base. The linked repository is user-owned rather than organization-backed, so no broader backing is shown to compensate for that concentration.

Package scaffoldingcaution

The package includes a readme and a GitHub release for this version, but has no tests, changelog, or release notes; the readme is only 163 characters and says documentation is still forthcoming. The package is small, so the missing tests are a meaningful maturity gap rather than merely cosmetic.

Release historycaution

The latest release was in March 2024, with no releases in the last 12 months, indicating a release cadence that has stopped for over two years. The five-release history shows the package was previously published, but does not offset the current inactivity.

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers in the last three months, which weakens evidence of ongoing maintenance. A recent push shown by repository status does not demonstrate continuing development activity.

Repo toolingcaution

Composer is used for builds, which fits the package ecosystem, but no security scanning tools are configured. This is a hygiene gap that adds modest transparency risk without proving the release is unsafe.