razorpay/magento

Repo bus factorcaution

Two contributors were active recently, so maintenance is not entirely single-person; however, one contributor made 75% of the 4 recent commits, leaving activity concentrated.

Repo commit activitycaution

The repository had only 4 commits from 2 active maintainers in the last 3 months, which is some current activity but a thin maintenance pace for a payment extension.

Security policycaution

No repository security policy was found, reducing transparency for reporting and handling vulnerabilities in a payment integration.

Workflow auditcaution

The sole workflow has one high-confidence medium-severity secrets-inherit finding and its only action use is unpinned. No untrusted checkout, script injection, or broad top-level write permission was detected, so this is a hygiene concern rather than a severe workflow risk.