Package Health/fond-of-oryx/payment-total-amount-restriction

fond-of-oryx/payment-total-amount-restriction

Usable with caveats: the package is clearly licensed, tested, lightweight, and backed by a matching organization repository, but its registry release history has been inactive for more than three years and recent repository activity is absent. Review ongoing project support before adopting it for a critical payment flow.

Latest 2.0.0

Packagist

65%

Total Score

Maintainer Stability

Dependencies

100

Maturity

Supply Chain

Health Score Breakdown

Release history

The package has only three releases and no releases in the last 12 months; its latest registry release was over three years ago, which is a meaningful maintenance concern despite the package not being deprecated.

Repo commit activity

There were no commits and no active maintainers in the last three months, weakening evidence of ongoing maintenance; the January 2025 push partially offsets but does not remove this concern.

Repo tooling

The repository uses Make and Composer build tooling, but it has no detected security-scanning tools, leaving a modest transparency and assurance gap.

Security policy

No security policy was found in the repository, reducing clarity about vulnerability reporting and maintenance expectations for a payment-related component.

Token permissions

The only workflow lacks top-level token permissions. No write permissions were detected, but explicitly restricting workflow permissions would provide stronger supply-chain hygiene.