solution25/square-payments

Lifecycle scriptscaution

post-install-cmd and post-update-cmd scripts run package code during dependency operations, adding a modest supply-chain and installation-review concern.

Repo bus factorcaution

All recent commits came from one contributor, creating a thin operational fallback; organization ownership provides some ability to hand maintenance off.

Repo commit activitycaution

Only one commit was recorded in the past three months, showing limited recent source activity despite the regular registry release history.

Repo toolingcaution

Composer build tooling is present, but no security-scanning tooling was detected, leaving security checks less visible.

Security policycaution

The repository has no security policy, so users lack a documented reporting and response path for vulnerabilities.