setono/payum-quickpay

Repo bus factorcaution

One contributor made all 65 commits in the last 3 months, creating a clear continuity risk; organization backing partly reduces the handoff concern but does not remove concentration.

Repo toolingcaution

Composer build tooling is present, but no security scanning tools were detected, leaving a modest security-process gap.

Security policycaution

The repository has no security policy, so vulnerability reporting and response expectations are not documented.

Version stabilitycaution

This is a release candidate rather than a stable release, and 40% of recent releases are prereleases, so compatibility may still change despite the mature major line.

Workflow auditcaution

The sole workflow was fully analyzed with no injection or high-severity findings, but all 19 action references are unpinned, which weakens build reproducibility and action supply-chain hygiene.