tcgunel/omnipay-moka

Release historycaution

There have been only two releases, both on the same day, with no later release activity over the package's 190-day lifetime. This suggests limited maturity and a still-unproven maintenance cadence.

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers in the last three months. Combined with the short release history, this leaves maintenance continuity uncertain.

Repo toolingcaution

Composer build tooling is present, but no security-scanning tooling was detected. This is a modest transparency and maintenance gap, not evidence that the package is unsafe.

Security policycaution

The repository has no security policy, leaving no documented process for reporting and handling vulnerabilities in a payment integration.

Workflow auditcaution

The single workflow was fully analyzed with no dangerous triggers, untrusted checkouts, or audit findings, but all four action references are unpinned. The workflow also lacks a top-level permissions block, which is acceptable on its own.