putyy/yun-pay

Licensecaution

The artifact contains a license file, but it is detected as Apache-2.0 while the manifest declares MIT. That mismatch should be resolved before relying on the stated licensing terms.

Project backingcaution

The repository is owned by a user account rather than an organization. That does not establish poor health, but it provides less visible institutional backing for a payment-related library.

Release historycaution

Seven releases since October 2020 and one release in the last 12 months show ongoing publication, but the median interval of about 227 days indicates a slow cadence.

Repo commit activitycaution

There were zero commits and zero active maintainers in the last three months, which is a concrete sign of slowed maintenance for a package handling payment integrations.

Repo toolingcaution

Composer build tooling is present, but no security-scanning tools are configured. This is a modest transparency and maintenance gap rather than evidence of unsafe code.