oscar-team/reepay-php-api

Licensecaution

The manifest declares GPL-3.0 while the detected artifact license file is MIT. Both provide licensing information, but the mismatch creates uncertainty about the applicable terms.

Release historycaution

The package has 33 releases over about 2 years and 10 months, but only one release in the last 12 months; this indicates a materially slower release cadence.

Repo commit activitycaution

There were no commits and no active maintainers in the last three months. Together with the slow release cadence, this is a meaningful maintenance concern, though the recent release provides some counterevidence.

Security policycaution

No security policy is present in the repository, leaving vulnerability reporting and response expectations undocumented.

Workflow auditcaution

The only workflow was fully analyzed with no dangerous triggers or audit findings, but both of its two action references are unpinned; this is a workflow reproducibility and supply-chain hygiene gap.