tcgunel/omnipay-tosla

Repo bus factorcaution

One contributor made all commits during the last 3 months, leaving maintenance highly concentrated. The project is user-owned rather than organization-backed, so there is no provided evidence of easy handoff.

Repo commit activitycaution

Only 1 commit was recorded in the last 3 months, showing recent activity but a very thin maintenance cadence. This lowers confidence in sustained support.

Repo toolingcaution

Composer build tooling is present, but no security-scanning tools were detected. This is a modest transparency and maintenance gap rather than a standalone severe risk.

Security policycaution

The linked repository has no security policy, leaving vulnerability reporting and response expectations undocumented.

Workflow auditcaution

The single workflow was fully analyzed with no dangerous triggers or audit findings, but all 4 of 4 action references are unpinned. That weakens build reproducibility and supply-chain hygiene.