moffhub/billing

Repo bus factorcaution

All six recent commits came from one contributor, creating a genuine continuity risk if that person becomes unavailable. Organization ownership partly compensates by providing a potential handoff path.

Repo toolingcaution

Composer build tooling is present, but no security scanning tools were detected, leaving a gap in automated security hygiene for a payment-related package.

Security policycaution

The repository has no security policy, so users lack an established process for reporting vulnerabilities in a package that handles billing and payment integrations.

Token permissionscaution

The only workflow does not declare top-level token permissions. It does not request top-level write access, but explicit least-privilege permissions would provide clearer CI safety.

Version stabilitycaution

Version v0.1.1 is not a stable major release, so its API may still change and it carries more adoption risk than a mature 1.x package.