magematch/magento2-payment

Release historycaution

This is a young package with one release in 150 days and no established release cadence, so its maintenance maturity is still unproven.

Repo commit activitycaution

There were zero commits and zero active maintainers in the last three months, which is a meaningful maintenance concern for a package only 150 days old.

Repo toolingcaution

Composer build tooling is present, but no security scanning tools were detected, leaving a modest transparency gap.

Security policycaution

The repository has no security policy, reducing clarity about vulnerability reporting and response.

Workflow auditcaution

The single workflow was completely analyzed with no dangerous triggers or audit findings, but both action references are unpinned, leaving avoidable build-integrity risk.