maksekeskus/makecommerce-php-sdk

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers over the last three months. For a payment SDK, that is a meaningful maintenance concern, although the package is young and had recent releases.

Repo popularitycaution

The repository has zero stars, zero watchers, and one fork. This is weak supporting evidence of maturity, but popularity alone does not outweigh the active organization ownership and release history.

Security policycaution

The repository has no published security policy. That reduces disclosure transparency for a payment integration, although it is not evidence that the code is unsafe.

Workflow auditcaution

The single workflow was fully analyzed with no untrusted checkout, injection, or high-confidence audit findings, and it has no top-level write permissions. However, all 6 of 6 action references are unpinned, which weakens build reproducibility and supply-chain hygiene.