wangshunda/bnupay

Release historydanger

The package has only one release, published in November 2019, with no releases in the last 12 months. This is strong evidence of an unmaintained dependency and is not offset by its stable version.

Licensecaution

The manifest declares MIT while the artifact license file and repository license are detected as GPL-3.0. This mismatch creates a real licensing and adoption concern even though a license is present.

Package scaffoldingcaution

The package includes a README, but it is only 16 characters and contains no substantive usage guidance. Missing tests and changelog files are normal for published artifacts and do not count against it.

Repo popularitycaution

The repository has zero stars and forks and one watcher. Popularity is only supporting evidence, but these counts provide no additional evidence of an active user or contributor community.

Repo toolingcaution

Composer is used as the build tool, which is appropriate for the package ecosystem, but no security scanning tools are configured. The missing scanning reduces maintenance assurance without indicating a direct defect.