The source includes tests, a changelog, release notes, and a stable major version. Maintenance activity is thin, repository identity is unclear, and the package has been replaced; use the replacement package instead.
42%
Total Score
50
69
50
Packagist marks the entire package as abandoned and names 3brs/sylius-gpwebpay-plugin as its replacement. This is a direct reason not to start a new dependency on this package.
The package has existed for about 6 years with 8 releases and only 1 release in the last 12 months. The recent v2.5.0 release is positive, but the overall cadence is limited.
The repository recorded 0 commits and 0 active maintainers in the last 3 months. A recent release partly offsets this, but current maintenance capacity remains uncertain.
The repository name does not match the package name and its README does not mention the package. That weakens confidence that the linked repository is the package's authoritative source.
The repository uses Make and Composer build tooling, but no security scanning tools were detected. Build support is present while security-process evidence is limited.
We didn't find any vulnerabilities for this package.
No maintainer information available.
| Dependency | Last Release | Score |
|---|---|---|
sylius/sylius Version ^2.1 | — | — |
alcohol/iso4217 Version ^4.2 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.