victoralagwu/cardconnect

Release historycaution

This is the only release, published nearly two years ago, with no releases in the last 12 months. That leaves maintenance and compatibility uncertain.

Repo commit activitycaution

The repository recorded no commits and no active maintainers in the last three months, following a long period without another release. This is meaningful abandonment risk for a payment API adapter.

Security policycaution

The repository has no published security policy. This is a transparency gap for a package that handles payment-service integrations, though it does not by itself show unsafe code.

Workflow auditcaution

The single workflow was fully analyzed with no dangerous triggers or audit findings, but all 6 action references are unpinned. That weakens build reproducibility and supply-chain hygiene.