ttpryg/payment-engine

Release historycaution

This is the package's first release, published on the assessment date, so there is no release history to demonstrate sustained maintenance. Its stable 1.0.0 version is a modest compensating signal, not evidence of maturity.

Repo commit activitycaution

No commits or active maintainers were recorded during the last three months. Because the repository is newly released, this may reflect its age, but it still leaves maintenance capacity unproven.

Security policycaution

The repository has no security policy, which is a minor transparency gap for a payment-focused library, though it does not by itself indicate abandonment.

Workflow auditcaution

The workflow audit completed cleanly with no untrusted checkouts, script injection, or high-confidence findings. However, both analyzed action references are unpinned, leaving avoidable build reproducibility and action-update risk.