tourze/payment-contracts

Release historycaution

Only one release exists, published about 10 months ago, so there is little release history demonstrating sustained maintenance.

Repo commit activitycaution

There were no commits or active maintainers in the last three months, and the last push aligns with the initial release about 10 months ago; this is meaningful evidence of limited ongoing maintenance.

Repo toolingcaution

Composer build tooling is present, but no security-scanning tools were detected, leaving a modest transparency and maintenance gap.

Security policycaution

The repository has no security policy, so it provides no documented process for reporting or handling vulnerabilities.

Workflow auditcaution

Both workflows were fully analyzed with no dangerous triggers, untrusted checkouts, or audit findings. However, all three action references are unpinned, which weakens build reproducibility and supply-chain hygiene.