sykescottages/phpstan-braintree

Release historycaution

Only two releases have been published since November 2022, with no release in about 20 months and a median interval of roughly 2 years 2 months. This is a meaningful maintenance concern for a dependency, although the package is specialized and version 1.0.1 has release notes.

Repo commit activitycaution

There were no commits and no active maintainers in the prior three months. Combined with the long time since the latest release, this supports a caution about stalled maintenance.

Repo toolingcaution

The repository uses Composer, but no security-scanning tool was detected. This is a modest transparency and security-process gap rather than evidence that the package is unsafe.

Security policycaution

The repository has no published security policy, leaving reporting and response expectations undocumented. This matters more for a package supporting payment-related integrations, despite the package itself being static-analysis stubs.