orcarail/cashier-orcarail

Release historycaution

At 49 days old with only two releases, the package has too little history to demonstrate long-term maintenance or stability. The second release and recent repository activity provide some support but do not remove the maturity gap.

Repo bus factorcaution

Two contributors are active, but one accounts for 80% of the five recent commits. The second contributor and organization backing provide partial resilience, so this is a modest concentration concern rather than a severe risk.

Repo popularitycaution

The repository has zero stars, forks, and watchers. This is supporting evidence of limited adoption, though low popularity alone does not establish poor maintenance.

Repo toolingcaution

Composer build tooling is present, but no repository security-scanning tool was detected. For a package handling billing and webhooks, that is a modest transparency and maintenance gap.

Security policycaution

The repository has no security policy. That leaves vulnerability reporting and response expectations unclear for a package handling payment integrations.