cimplival/pesapal

Release historydanger

The package has had no release in nearly 7 years: its latest release was October 2019, with zero releases in the last 12 months. This is strong evidence of abandonment for a Laravel integration package.

Repo commit activitydanger

There were zero commits and zero active maintainers in the last 3 months. Combined with the last release being in 2019, this indicates sustained abandonment risk.

Lifecycle scriptscaution

The package declares a post-update-cmd lifecycle script, which adds install-time execution and modest supply-chain exposure; no further script behavior is provided to establish a severe risk.

Repo toolingcaution

Composer is used as the build tool, but no security-scanning tools are present. This is a modest transparency and maintenance gap rather than evidence of an unsafe release by itself.

Repository archivedcaution

The repository is not archived, but its last push was in October 2019, so the active repository status does not compensate for the absence of recent maintenance.