frootbox/paypal

The package has a clear license, a matching repository, and a very small dependency surface. Its documentation is minimal, and no security policy is present. Pinning this version is safer than expecting ongoing support.

Latest 0.0.7

Packagist

43%

Total Score

Maintainer Stability

Dependencies

100

Maturity

Supply Chain

Health Score Breakdown

Release history

The latest release was over three years ago, with no releases in the last 12 months. Seven releases arrived early in the project, but the prolonged pause is a substantial maintenance concern.

Repo commit activity

There were no commits and no active maintainers in the last three months. Combined with the old latest release, this indicates a strong risk of abandonment.

Package scaffolding

The artifact includes a README, but its 68-character text describes the package only as an early test/development bundle. The absence of tests and a changelog is normal packaging practice and is not treated as a gap.

Repo popularity

The repository has zero stars, forks, and watchers. Popularity is only supporting evidence, but the complete absence of visible adoption adds to the maturity concern.

Repo tooling

Composer is used as the build tool, which fits the ecosystem, but no security scanning tools are present. This is a modest supply-chain hygiene gap rather than proof of unsafe code.