payum/payum-bundle

Repo commit activitycaution

The repository had zero commits and zero active maintainers in the last three months, a concrete sign that maintenance may have slowed despite the recent release.

Repo issue activitycaution

There were no new or closed issues or pull requests in the last month, although nine open pull requests show some unresolved contribution activity rather than a fully abandoned tracker.

Repo toolingcaution

Composer is used for builds, but no security scanning tool was detected, leaving a security-process gap in the source project.

Security policycaution

The repository has no security policy, reducing transparency about how vulnerabilities should be reported and handled.

Workflow auditcaution

The single workflow was fully analyzed with no auditor findings and no broad write permissions, but all three action references are unpinned, weakening reproducibility and update integrity.