whilesmart/entitlements-cashier

Release historycaution

The package is only 62 days old with three releases, spaced about 31 days apart. This shows ongoing publication but provides limited long-term maintenance evidence.

Repo bus factorcaution

All two recent commits came from one contributor, giving the project a complete short-term contributor concentration. Organization backing provides some handoff capacity but does not demonstrate a second active contributor.

Repo commit activitycaution

The repository had two commits in the last three months, with activity from one maintainer. Recent activity exists, but the volume is thin for establishing durable maintenance.

Repo toolingcaution

The project uses Make and Composer, but no security scanning tools were detected. This is a modest transparency and maintenance gap rather than evidence of unsafe code.

Security policycaution

No SECURITY.md or other repository security policy was detected. For a package handling Stripe billing and webhooks, the lack of a reporting path modestly reduces transparency.