spryker-eco/braintree

Release historycaution

The package has had no registry release in more than four years, despite 13 releases overall. Its earlier release cadence shows a previously established project, but the extended gap raises abandonment risk.

Repo commit activitycaution

There were zero commits and zero active maintainers in the last three months. The repository was pushed in October 2024, but the lack of current activity materially increases maintenance risk.

Repo toolingcaution

Composer build tooling is present, but no security scanning tools were detected. The build setup is clear, while security-maintenance visibility is limited.

Security policycaution

The repository has no security policy. For a payment integration, this is a meaningful transparency gap because users have no documented reporting path in the collected evidence.

Workflow auditcaution

The single workflow was fully analyzed with no injection or high-severity findings, but all seven action references are unpinned. This leaves avoidable workflow supply-chain hygiene risk; the missing top-level permissions block is not harmful on its own.