robuust/craft-commerce-pay

Release historycaution

The package has 9 releases over about 4 years, but none in the last 12 months; the latest release was published in September 2024. This indicates a meaningful maintenance slowdown.

Repo commit activitycaution

The repository recorded 0 commits and 0 active maintainers in the last 3 months, consistent with the absence of recent registry releases and raising abandonment concerns.

Repo issue activitycaution

There were no new or closed issues or pull requests in the last month, with 1 issue still open. This shows little recent project interaction, though the small backlog is not severe by itself.

Security policycaution

The repository has no security policy. That reduces transparency for reporting and handling vulnerabilities in a payment integration.

Workflow auditcaution

The single workflow was fully analyzed with no dangerous triggers, sinks, or audit findings, but both of its 2 action references are unpinned. That is a workflow reproducibility and supply-chain hygiene gap.