mariodevv/laravel-redsys-subscriptions

Release historycaution

The package is only 1 day old with 3 releases, all published within roughly 21 hours, so there is not yet enough history to demonstrate sustained maintenance or production maturity.

Repo commit activitycaution

There were 0 commits and 0 active maintainers in the prior 3 months, although the repository is only 1 day old. This is primarily a lack of historical evidence rather than proof of abandonment, but it lowers confidence in sustained maintenance.

Security policycaution

No security policy was found in the repository. For a package handling recurring payment data, this is a transparency gap, even though it is not by itself evidence of unsafe code.

Token permissionscaution

The repository's single workflow has no top-level token permissions declaration. No write permissions were observed, but explicitly restricting workflow tokens would provide stronger CI security hygiene.

Version stabilitycaution

Version v0.11.0 is not a stable major release, and the package's available documentation describes the project as beta with an API that may change before 1.0. That is a meaningful compatibility risk for a billing integration.