payever/plugins-sdk-php

Release historycaution

The package has nine releases over roughly three and a half years and one release in the last 12 months, indicating ongoing but infrequent maintenance.

Repo bus factorcaution

All three-month commit activity comes from one contributor, creating concentration risk. Organization ownership provides some ability to hand maintenance to another contributor, partly compensating for that concentration.

Repo commit activitycaution

Only one commit was recorded in the last three months, by one active maintainer. This shows some activity but a thin recent maintenance cadence.

Repo toolingcaution

Composer is used for builds, but no security-scanning tools were detected. This is a modest supply-chain hygiene gap rather than evidence of unsafe code.

Security policycaution

The repository has no security policy, leaving vulnerability-reporting and response expectations undocumented.