wizcodepl/lunar-tpay

Release historycaution

All four releases were published within roughly four hours on the package's first day, so the release history shows initial activity but not an established long-term cadence.

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers in the last three months; with the last push shortly after the initial release, this indicates a meaningful maintenance risk.

Repo toolingcaution

Composer build tooling is present, but no security-scanning tool was detected, leaving security hygiene less visible than the testing and code-quality setup.

Security policycaution

The repository has no SECURITY.md or other detected security policy, reducing transparency about vulnerability reporting and response.

Workflow auditcaution

All three workflows were analyzed successfully with no dangerous audit findings or broad write permissions, but all six action references are unpinned, leaving workflow dependencies exposed to upstream changes.