oixan/cashier-connect

Release historydanger

The package has had no release in over six years: its latest release was April 2020, with no releases in the last 12 months. This is strong evidence of abandonment for a library dependency.

Repo commit activitydanger

The repository recorded zero commits and zero active maintainers in the last three months, while its last push was over four years ago. The inactive source confirms that registry staleness is not merely a release-publishing gap.

Maintainerscaution

Only one registry account has publish access. The repository is user-owned rather than organization-backed, so there is little visible publishing redundancy if that maintainer stops supporting the package.

Repo toolingcaution

Composer build tooling is present, but no security-scanning tools were detected. This is a modest hygiene gap and does not outweigh the much stronger maintenance evidence.

Security policycaution

The linked repository has no security policy. For a package handling Stripe payments and webhooks, that leaves vulnerability reporting and security-maintenance expectations unclear.