os2forms/os2forms_payment

Release historycaution

The latest registry release was about 19 months ago, with no releases in the last 12 months. This is a meaningful maintenance concern despite the package having six releases overall.

Repo commit activitycaution

There were no commits and no active maintainers in the last 3 months. This weakens confidence in ongoing maintenance, although the repository was pushed in March 2026.

Repo toolingcaution

Composer build tooling is present, but no security-scanning tool was detected. The missing scanning is a hygiene concern for a payment-related module.

Security policycaution

No repository security policy was found. For a module handling payment integration, this reduces transparency around vulnerability reporting and response.

Workflow auditcaution

The workflow was fully analyzed and has no untrusted checkout or script-injection findings, but all 13 action references are unpinned. The high-confidence template-injection finding is a workflow hygiene concern without a corroborating dangerous trigger or sink.