durianpay/dpay-php

Release historydanger

The package has had only one release, published over four years ago, with no releases in the last 12 months. That leaves compatibility and maintenance uncertain despite the stable 1.0.0 version.

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers in the last three months. Its last push was in June 2024, so current maintenance capacity is weak.

Security policycaution

The linked repository has no security policy and no security scanning tools. This reduces transparency for handling vulnerabilities in an API client.

Workflow auditcaution

All three analyzed workflow action references are unpinned, which weakens build reproducibility. Read-only permissions, no untrusted checkout, and no injection findings provide meaningful compensation.