black-lamp/blcms-payment

Release historydanger

The package has had only three releases, with the latest in January 2017 and none in the last 12 months despite being over nine years old. This is strong evidence of abandonment risk.

Repo commit activitydanger

There were zero commits and zero active maintainers in the last three months, consistent with the last repository push occurring in 2017. This materially raises abandonment risk.

Dependency profilecaution

The package declares five runtime dependencies, including the tightly coupled blcms-shop and Yii-related modules. This increases compatibility and maintenance exposure for an already old package, though the dependency count is not excessive by itself.

Repo popularitycaution

The repository has zero stars and forks and one watcher, providing little community adoption or external validation. Popularity is supporting evidence, so this modestly reinforces the maintenance concern rather than determining it alone.

Repo toolingcaution

Composer is used for builds, but no security scanning tools are configured. The missing scanning is a maintenance and transparency gap, although it does not by itself show unsafe code.