solution25/nmi-payment

Repo bus factorcaution

All 6 recent commits came from one contributor, giving the project a high dependency on a single active maintainer. Organization backing helps with potential handoff but does not show a second active contributor.

Repo toolingcaution

Composer build tooling is present, but no security scanning tools were detected. For a payment integration, that is a meaningful security-maintenance gap.

Security policycaution

The repository has no published security policy. For payment-processing software, the absence of a documented vulnerability-reporting process lowers transparency.

Workflow auditcaution

The single workflow was fully analyzed with no dangerous triggers, sinks, or audit findings. However, all 3 action references are unpinned, leaving the build exposed to changing action contents.