payum/paypal-rest

Repo bus factorcaution

All four recent commits came from one contributor, leaving maintenance dependent on a single active person. Organization ownership provides some handoff capacity but does not remove the current concentration.

Repo commit activitycaution

Four commits were made in the last three months, indicating current activity, but the activity level is modest for a maintained integration.

Repo toolingcaution

Composer build tooling is present, but no security-scanning tooling was detected, leaving a preventable transparency and dependency-risk gap.

Security policycaution

The repository has no security policy, so users have no documented reporting or response process for vulnerabilities.