lichtblauit/lunar-paypal

Release historydanger

Only two releases were published, both in April 2024, with no release in the following two years. That sharply raises abandonment risk for a payment integration.

Repo commit activitydanger

The repository recorded zero commits and zero active maintainers in the last three months, consistent with the long release gap and indicating very weak current maintenance.

Workflow auditdanger

The audit completed all five workflows and found a high-confidence bot-conditions issue in the Dependabot auto-merge workflow; all 12 analyzed action references are unpinned. The pull_request_target trigger has no untrusted checkout or script-injection sink, so it is not independently dangerous.

Repo popularitycaution

The repository has zero stars, zero watchers, and one fork. Popularity is only supporting evidence, but these numbers provide little evidence of a broad maintenance community.

Security policycaution

The repository has no security policy. For a package handling PayPal payments, this is a meaningful transparency gap, though it does not by itself show abandonment.