oalid-cse/laravel-paymongo

Maintainerscaution

One registry maintainer provides a thin ownership base, although the repository and package documentation identify the same individual, so this is a capacity concern rather than a transparency failure.

Release historycaution

The package has only three releases, all effectively concentrated on 8 May 2022, with no releases in the last four years. This is strong evidence of limited ongoing maintenance.

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers in the last three months, consistent with the long release gap and increasing abandonment risk.

Repo toolingcaution

Composer build tooling is present, but no security scanning tools were detected. This is a modest hygiene gap for a library handling payment API integrations.

Security policycaution

The linked repository has no SECURITY.md or other formal security policy. The README provides a security contact, which offers some compensating transparency but not an established reporting process.