citypay/php-sdk

Release historydanger

The package has made no release in more than 8 years: its latest release was September 2018, despite being an established package with six releases.

Repo commit activitydanger

The repository recorded zero commits and zero active maintainers in the last 3 months, consistent with the absence of releases since September 2018 and indicating severe abandonment risk.

Repo toolingcaution

Composer and Phing provide build tooling, but no security scanning tools are configured. This is a maintenance and assurance gap, though not severe by itself.

Repository archivedcaution

The linked repository is not formally archived, but its last push was in September 2018; the lack of archival status does not compensate for the observed inactivity.

Security policycaution

The repository has no security policy, leaving no documented route for reporting vulnerabilities in a payment SDK. The long inactivity makes this gap more consequential.