wmd/craft-bank-transfer-payment-codes

Release historycaution

The package is 0 days old with only 2 releases, so there is not yet enough release history to demonstrate sustained maintenance. The recent second release and detailed notes provide some evidence of active initial development.

Repo commit activitycaution

The repository shows 0 commits and 0 active maintainers over the last 3 months. Because the package is newly released, this is more a lack of an established maintenance record than evidence of a long-term collapse.

Repo toolingcaution

Composer build tooling is present, but no security scanning tools were detected. The build setup is a positive, while the missing scanning is a modest transparency gap for a payment-related plugin.

Security policycaution

The repository has no security policy. That leaves vulnerability-reporting expectations undocumented, although it does not by itself show that the package is unsafe.

Workflow auditcaution

The workflow audit completed fully with no dangerous triggers, untrusted checkouts, script injection, or audit findings, and it scopes permissions at job level. Its one action is unpinned, leaving a modest reproducibility and workflow supply-chain gap.