shaanid/paypal-package

Repo commit activitydanger

There were zero commits and zero active maintainers in the last three months. For a package already 228 days old, that is a meaningful maintenance warning, although the single-release history makes the observed window relatively limited.

Release historycaution

This is a 228-day-old package with only one published release, so there is little evidence of sustained maintenance or release maturity. Its stable v1.0.0 status provides some baseline usability but does not offset the thin history.

Repo popularitycaution

The repository has zero stars, forks, and watchers, providing no supporting evidence of community adoption or outside review. Popularity is only supporting evidence, so this lowers confidence rather than determining the verdict.

Repo toolingcaution

Composer build tooling is present, but no security scanning tool is configured. The missing scanner is a hygiene gap rather than evidence that the package is unsafe.

Security policycaution

The repository has no security policy, leaving vulnerability reporting and response expectations undocumented. This is a transparency gap for a package handling payment integrations.