spectrocointest/drupal-merchant-test

Repo commit activitydanger

The repository recorded zero commits and zero active maintainers during the last three months. Combined with the long release gap, this raises abandonment risk.

Repo package mentiondanger

The linked repository name does not match the package and its README does not mention the package. That makes package-to-source ownership unclear rather than merely reflecting a normal monorepo sub-package.

Licensecaution

The manifest declares GPL-3.0+, while the artifact and repository license file identify GPL-2.0. This mismatch creates a real licensing and transparency concern.

Release historycaution

The package has only two releases, with none in the last 12 months; the latest release was about 14 months ago. This indicates a very limited and currently inactive release history.

Security policycaution

The repository has no security policy and no security scanning tools. For a payment gateway module, this leaves a meaningful maintenance and vulnerability-reporting gap.