Driver for online payments via Tinkoff (see cashier-provider/core)
12%
Total Score
critical
Unfit to use: the package is deprecated and its source repository is archived.
Packagist marks the entire package as abandoned and names cashbox/tinkoff-online as its replacement. This is a direct adoption risk for a new dependency.
The latest release was published in July 2023, with no releases in the following three years and two months of observed history. This strongly supports the abandonment concerns.
The repository recorded no commits and no active maintainers in the last three months. Together with the archived status, this indicates inactive development rather than a merely quiet period.
The linked source repository is archived, so it is no longer maintained through normal project activity. That makes future fixes and compatibility work unlikely.
The repository has no security policy, leaving vulnerability-reporting expectations unclear. This is an additional transparency gap, though the abandoned status is substantially more serious.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
psr/http-message Version ^1.0 | — | — |
cashier-provider/core Version ^3.0 | — | — |
cashier-provider/tinkoff-auth Version ^3.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.