safaricom/mpesa

Release historydanger

The latest release was in January 2019, about 7 years and 8 months before collection, with no releases in the last 12 months. This materially raises abandonment and compatibility risk.

Repo commit activitydanger

The repository recorded zero commits and zero active maintainers in the last three months. Combined with the old registry release, this is strong evidence that ongoing maintenance has stalled.

Repo issue activitycaution

There are 24 open issues and 5 open pull requests, but no issues or pull requests were created or merged in the last month. This suggests unresolved maintenance demand and limited current responsiveness.

Repo toolingcaution

Composer build tooling is present, but no security scanning tools were detected. The missing scanning is a hygiene gap, not a standalone reason to reject the package.

Security policycaution

The linked repository has no security policy, leaving no documented route for reporting vulnerabilities in a package that handles payment APIs.