Package Health

damms005/laravel-multipay

This release presents a generally healthy dependency profile: it has a nearly five-year release history with 179 releases and 26 releases in the last 12 months, is stable and not deprecated, and the repository was pushed very recently. The package and repository include substantial documentation, tests, a changelog, licensing, security policy, dependency scanning, and a read-only CI token configuration. The main concern is maintenance concentration: all 16 commits in the last three months came from one contributor, and issue and pull-request activity was dormant during the last month. That creates a meaningful bus-factor risk, but it is offset by continued releases, recent commits, a coherent matching repository, and strong project hygiene.

Latest v9.2.0PackagistPackagist

82%

Total Score

Maintainer Stability
Maintainer Stability
Assesses the consistency and reliability of package maintainers

60

Dependencies
Dependencies
Evaluates the health and security of package dependencies

100

Maturity
Maturity
Indicates package age, release frequency, and adoption metrics

100

Supply Chain
Supply Chain
Evaluates supply chain security practices and risks

100

Health Score Breakdown

Maintainerscaution

Only one account has registry publish access, which is a modest publishing resilience concern; however, the repository is user-owned and recent release and commit activity show that the maintainer is active.

Project backingcaution

The repository is owned by the individual user damms005 rather than an organization, so there is no organizational handoff evidence to offset the concentrated maintainer base.

Repo bus factorcaution

Only one contributor made commits during the last three months, holding 100% of the commit share. Continued activity is reassuring, but this concentration creates a genuine single-maintainer continuity risk.

Repo issue activitycaution

There were no new or closed issues or pull requests in the last month, while one issue and two pull requests remain open. This is a minor sign of limited community activity, though it is partly compensated by recent commits and releases.

Vulnerabilities

We didn't find any vulnerabilities for this package.

Package versions

Maintainers

Damilola Olowookere

Direct Dependencies

DependencyLast ReleaseScore
guzzlehttp/guzzle
Version ^7.3
illuminate/support
Version ^7.0|^8.0|^9.0|^10.0|^11.0|^12.0|^13.0
yabacon/paystack-php
Version ^2.2

Weekly Downloads

Info

Last Published
16 days ago
Created
4 years ago

Are You Affected?

Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.

Free. No credit card required.

Aikido Platform