dewbud/cardconnect

Clear documentation, tests, and licensing support adoption, while missing security scanning and unpinned CI actions add maintenance risk. The repository is not archived and matches the package, but ongoing support looks limited.

Latest 2.1.0

Packagist

55%

Total Score

Maintainer Stability

Maturity

Supply Chain

Health Score Breakdown

Release history

The latest release was in February 2021, with no releases in the last 12 months. This is a substantial maintenance concern for a payment API adapter, despite the package having seven releases overall.

Repo commit activity

The repository recorded zero commits and zero active maintainers in the last three months, indicating limited recent development. Its last push in November 2024 provides some evidence of later activity but does not offset the current slowdown.

Repo issue activity

There were no new or closed issues or pull requests in the last month, while two issues and two pull requests remain open. This suggests limited visible maintenance, though the small project size makes the signal less severe.

Repo tooling

Composer build tooling is present, but no security scanning tools were detected. For a package handling payment integrations, that is a meaningful transparency and maintenance gap.

Workflow audit

The single workflow was fully analyzed with no dangerous triggers or audit findings, but all six action references are unpinned. This leaves CI dependent on mutable action versions and is a moderate supply-chain hygiene concern.