paradoxlabs/cybersource-hyva-checkout

Release historycaution

The package is only 47 days old and has two releases, with a median interval of about 48 days. That is too little history to demonstrate long-term maintenance, though the second release arrived with substantive fixes.

Repo bus factorcaution

All 27 recent commits came from one contributor. This creates concentration risk, although the organization-owned repository provides some capacity to hand maintenance off.

Repo toolingcaution

Composer build tooling is present, but no security-scanning tooling was detected. The missing scanning is a modest transparency and hygiene gap rather than evidence of unsafe code.

Security policycaution

The repository has no security policy. For a payment integration, that reduces the clarity of vulnerability-reporting and response procedures.