nevar/mpesa

Release historydanger

This is the only release, published nearly seven years ago, with no releases in the last 12 months. That strongly indicates abandonment risk.

Repo commit activitydanger

The repository recorded no commits and no active maintainers in the last three months, while its last push was in January 2020. There is no recent maintenance evidence.

Package scaffoldingcaution

A README is present, but it explicitly says the package is still under development and that full documentation is forthcoming; the published artifact and repository have no tests or changelog. This weakens maturity and consumer support.

Repo toolingcaution

Composer is used for the build, but no security scanning tools are configured. Combined with the lack of recent maintenance, this reduces confidence in ongoing dependency and code hygiene.

Security policycaution

The repository has no security policy, leaving vulnerability reporting and response expectations unclear. This is a meaningful transparency gap for a payment integration library.