revolution/laravel-paypay

Maintainerscaution

Only one account has registry publish access, which limits publishing redundancy; the organization-owned repository provides some backing but does not replace active maintainer capacity.

Release historycaution

The package has existed for over five years with 15 releases, but only one release in the last 12 months indicates a slow current cadence.

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers in the last three months, a meaningful sign of currently quiet maintenance.

Security policycaution

No security policy is present, leaving vulnerability reporting and response expectations undocumented.

Workflow auditcaution

The audit found no high-confidence dangerous workflow findings and all three workflows were analyzed, but all 8 action references are unpinned and two workflows grant top-level write permissions, creating build-reproducibility and token-scope concerns.