nahupay/nahupay-php

Release historycaution

This is the package's first release and it was published today, so there is no evidence yet of sustained maintenance or compatibility over time.

Repo commit activitycaution

There have been no commits or active maintainers in the last three months, but the package and repository were created today, so this primarily reflects the project's very short history rather than demonstrated abandonment.

Repo toolingcaution

Composer build tooling is present, but no security scanning tools were detected. That is a meaningful transparency gap for a payment SDK, although it is not evidence of unsafe code by itself.

Security policycaution

No repository security policy was found. For a payment integration this reduces the project's documented process for receiving and handling vulnerabilities.

Token permissionscaution

The publish workflow does not declare top-level token permissions, leaving its intended GitHub Actions access less explicit than recommended.