payprocessing/multicarta-sdk

Release historydanger

Only two releases were published, both in July 2018, with no release in about eight years. This is strong evidence of abandonment for a payment SDK, despite the package still being available.

Repository archivedcaution

The repository is not archived, but its last push was in August 2018, so the linked source has been inactive for about eight years. The unarchived status does not compensate for the prolonged lack of maintenance.

Security policycaution

The linked repository has no security policy. That weakens the project's documented process for reporting and handling vulnerabilities, especially for payment-related code.