bbcsky/yii2-payment

The package is clearly licensed, documented, and has a small dependency surface. Its lack of tests and security tooling adds maintenance uncertainty, while the long period without updates is the main concern.

Latest 0.1.0

Packagist

35%

Total Score

Maintainer Stability

Dependencies

100

Maturity

Supply Chain

Health Score Breakdown

Release history

Only one release exists, published in December 2015, with no releases in the last 12 months. Nearly eleven years without a new release is strong evidence of abandonment risk.

Repo commit activity

The repository recorded zero commits and zero active maintainers in the last three months, consistent with the package's long release gap and limited evidence of ongoing maintenance.

Package scaffolding

The artifact includes a substantial README and changelog, and the repository has a changelog, but neither the package nor repository has tests. The documentation helps transparency, while the missing tests reduce confidence in maintenance quality.

Repo tooling

Composer build tooling is present, but no security scanning tools were detected. This is a modest transparency and maintenance gap rather than evidence that the release is unsafe.

Repository archived

The linked repository is not archived, which is a positive sign, although its last push was in December 2015 and does not offset the prolonged inactivity.