damms005/laravel-cashier
This release has substantial evidence of active development and reasonable engineering hygiene: it has a long release history, a stable version, tests, changelog, a license file, recent commits, security policy, Dependabot, and restrictive workflow permissions. However, Packagist marks the package as abandoned and identifies damms005/laravel-multipay as its replacement, which is a decisive dependency risk; the linked repository also does not match the package name or mention it in the README, suggesting this release may be tied to a renamed successor rather than an actively maintained package identity. The repository is maintained by one contributor, further increasing continuity risk. Do not adopt this package; evaluate the replacement instead.
22%
Total Score
63
100
83
100
Health Score Breakdown
Packagist marks the package as abandoned and names damms005/laravel-multipay as its replacement. Although the linked project is active, an explicitly abandoned registry package is a severe dependency-maintenance risk.
The repository owner is an individual account, not an organization, so there is no organizational backing shown to compensate for the concentrated maintainer activity.
One contributor made all 16 commits in the last 3 months, producing a 100% top-contributor share. Because the owner is an individual rather than an organization, this is a genuine continuity risk.
There is only one open issue and two open pull requests, but no issues or pull requests were opened or merged in the last month. The small queue is benign, while the lack of recent collaboration modestly limits evidence of community maintenance.
The repository name does not match damms005/laravel-cashier, and its README does not mention that package. This raises concern that the linked repository belongs to the replacement or another package rather than this release.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
 Damilola Olowookere |
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 guzzlehttp/guzzle Version ^7.3 | — | — |
illuminate/support Version ^7.0|^8.0|^9.0|^10.0|^11.0|^12.0|^13.0 | — | — |
yabacon/paystack-php Version ^2.2 | — | — |
Weekly Downloads
Info
- Last Published
- 16 days ago
- Created
- 4 years ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.