coreshop/payum-stripe-checkout-bundle

Registry deprecationdanger

Packagist marks the entire package as abandoned, which is a major adoption risk even though the listed replacement is the same package. This outweighs the otherwise active repository evidence.

Release historycaution

The package has only 6 releases and no releases in the last 12 months, indicating a slow release cadence. Recent repository activity partly offsets the risk of complete abandonment.

Repo bus factorcaution

All 3 recent commits came from one contributor, leaving maintenance dependent on a single active person. Organization backing provides some handoff capacity but does not remove the concentration risk.

Repo package mentioncaution

The repository name does not match the package name and its README does not mention the package, creating some uncertainty about the package-to-repository relationship. The matching CoreShop organization reduces, but does not eliminate, that concern.

Security policycaution

The repository has no security policy, reducing transparency for reporting and handling vulnerabilities. This is a hygiene and maintenance concern rather than a standalone adoption blocker.