cashier-provider/sber-qr
Driver for payment with QR codes via Sber (see cashier-provider/core)
12%
Total Score
critical
Unfit to use: the package is deprecated and its repository is archived.
Health Score Breakdown
Packagist marks the entire package as abandoned and names cashbox/sber-qr as the replacement, making continued adoption a serious maintenance risk.
The latest release was in July 2023, with no releases in the following nearly three years, indicating prolonged inactivity.
The repository recorded zero commits and zero active maintainers in the last three months, consistent with the archived project state.
The linked repository is archived, which strongly indicates that active maintenance has ended; its last push was in November 2023.
The single workflow was fully analyzed with no audit findings, but it uses a pull_request_target trigger, top-level write permissions, and an unpinned action; these are hygiene concerns without an observed untrusted sink.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
 Andrey Helldar |
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 psr/http-message Version ^1.0 | — | — |
cashier-provider/core Version ^3.0 | — | — |
cashier-provider/sber-auth Version ^3.0 | — | — |
Weekly Downloads
Info
- Last Published
- 3 years ago
- Created
- 5 years ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.