solution25/pay-trace

Licensecaution

The artifact contains an MIT license file, but the manifest declares the package proprietary, so the release's licensing terms are inconsistent despite having a license file.

Repo bus factorcaution

All recent commits came from one contributor. Organization ownership provides some handoff capacity, but no second active contributor is shown.

Repo commit activitycaution

Only one commit was recorded in the last 3 months, showing limited recent development activity despite the recent release history.

Security policycaution

The repository has no security policy, which weakens the project's transparency for reporting and handling vulnerabilities in a payment plugin.

Workflow auditcaution

The sole workflow was fully analyzed with no audit findings or dangerous triggers, but all 3 action references are unpinned, leaving build inputs less reproducible.