wundii/afterbuy-sdk

Dependency profilecaution

The package has 12 runtime dependencies, including several PHP extensions and Symfony components; this is a meaningful dependency surface but not disproportionate for an SDK.

Repo bus factorcaution

All 3 recent commits came from one contributor, leaving maintenance capacity concentrated in a single person.

Repo commit activitycaution

The repository has 3 commits in the last 3 months, so activity is present but relatively light for a maintained SDK.

Security policycaution

The repository has no security policy, leaving vulnerability-reporting expectations and response guidance undocumented.

Workflow auditcaution

Both workflows were analyzed cleanly with no dangerous triggers, untrusted checkouts, or audit findings, but all 12 action references are unpinned, weakening build reproducibility.