藍新金流 SDK - NewebPay Payment Gateway SDK for PHP
65%
Total Score
caution
No commits in three months and one maintainer temper an otherwise well-documented, tested release.
Only one registry publishing maintainer is listed, leaving limited visible publishing capacity if that person becomes unavailable.
The package is backed by the matching individual repository owner rather than an organization, so the single-person support risk is not offset by organizational backing.
The package has 11 releases, but the median interval is about 35 minutes and the latest release was 10 months ago, suggesting an early burst followed by a long pause.
The repository recorded zero commits and zero active maintainers in the past three months, which is a meaningful sign of currently stalled development.
All three workflows were analyzed with no audit findings or untrusted checkouts, but all 15 action references are unpinned and two workflows grant top-level write permissions, creating a workflow-hygiene concern.
We didn't find any vulnerabilities for this package.
| Version | Published | Vulnerabilities |
|---|---|---|
| v2.2.2 | 5 Dec 2025 | 0 0 critical, 0 total 0 0 high, 0 total 0 0 medium, 0 total 0 0 low, 0 total |
| v2.2.1 | 5 Dec 2025 | 0 0 critical, 0 total 0 0 high, 0 total 0 0 medium, 0 total 0 0 low, 0 total |
| v2.2.0 | 5 Dec 2025 | 0 0 critical, 0 total 0 0 high, 0 total 0 0 medium, 0 total 0 0 low, 0 total |
| v2.1.0 | 5 Dec 2025 | 0 0 critical, 0 total 0 0 high, 0 total 0 0 medium, 0 total 0 0 low, 0 total |
| v2.0.3 | 5 Dec 2025 | 0 0 critical, 0 total 0 0 high, 0 total 0 0 medium, 0 total 0 0 low, 0 total |
| v2.0.2 | 28 Nov 2025 | 0 0 critical, 0 total 0 0 high, 0 total 0 0 medium, 0 total 0 0 low, 0 total |
| v2.0.1 | 28 Nov 2025 | 0 0 critical, 0 total 0 0 high, 0 total 0 0 medium, 0 total 0 0 low, 0 total |
| v2.0.0 | 28 Nov 2025 | 0 0 critical, 0 total 0 0 high, 0 total 0 0 medium, 0 total 0 0 low, 0 total |
| v1.1.0 | 5 Dec 2025 | 0 0 critical, 0 total 0 0 high, 0 total 0 0 medium, 0 total 0 0 low, 0 total |
| v1.0.1 | 28 Nov 2025 | 0 0 critical, 0 total 0 0 high, 0 total 0 0 medium, 0 total 0 0 low, 0 total |
| Dependency | Last Release | Score |
|---|---|---|
guzzlehttp/guzzle Version ^7.0 | — | — |
Secure your code, cloud, and runtime in one central system. Connect a repo to discover what the reasoning agents find in your codebase.
No credit card required | Scan results in 32 seconds.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.