wearesho-team/bobra-payments

Release historycaution

The package has 12 releases since April 2018, but none in the last 12 months; the latest release was about 16 months ago. This indicates materially slowed maintenance.

Repo commit activitycaution

The repository recorded no commits and no active maintainers in the last 3 months. The repository is not archived and was pushed with the release, but current maintenance activity is absent.

Repo issue activitycaution

There are four open pull requests, with no new or merged pull requests in the last month. This suggests unresolved contribution activity, though it is weaker evidence than a fully inactive issue tracker.

Security policycaution

The linked repository has no security policy. This is a transparency and vulnerability-reporting gap, although it does not by itself indicate abandonment.

Workflow auditcaution

The workflow audit completed fully with no dangerous triggers, untrusted checkouts, script injection, or auditor findings. However, all four action references are unpinned, leaving the workflow exposed to moving action revisions.