bowphp/payment

Release historydanger

This package has only one release, first published about 6 years 8 months ago, with no releases in the last 12 months. That leaves its compatibility and maintenance track record largely unproven.

Repo commit activitydanger

There were no commits and no active maintainers in the last three months. The recent repository push does not compensate for the absence of observed commit activity.

Dependency profilecaution

The package declares only two runtime dependencies, which is a modest dependency surface. However, phpunit is included as a runtime dependency, an unusual packaging choice that adds unnecessary consumer coupling.

Repo toolingcaution

Composer is used for builds, but no security scanning tools were detected. This is a transparency and maintenance weakness, though it is not severe on its own.

Security policycaution

The repository has no security policy, leaving reporting and response expectations undocumented for a package handling payment integrations.