pixidos/gpwebpay

Release historycaution

The package has 25 releases over more than 10 years, but none in the last 12 months; the latest release was about 18 months ago. This indicates materially slowed maintenance.

Repo commit activitycaution

There were zero commits and zero active maintainers in the last 3 months, consistent with the long release gap. This is a meaningful maintenance concern, though the repository was updated for the assessed release.

Repo issue activitycaution

There is only one open issue, with no new or closed issues or pull requests in the last month. This is quiet rather than clearly harmful, but it provides little evidence of active community maintenance.

Security policycaution

The repository has no security policy, leaving no documented process for reporting vulnerabilities. This is a transparency gap for a payment integration.

Workflow auditcaution

Both workflows were fully analyzed with no untrusted checkouts, script injection, or audit findings, but all 7 action references are unpinned. That weakens build reproducibility and supply-chain hygiene without making the release unfit on its own.