Usable with caveats: the package is licensed, small, clearly tied to its repository, and not deprecated, but it has had no release or commit activity for about 2 years and 6 months. Its lack of tests and security scanning adds maintenance uncertainty.
58%
Total Score
33
100
72
88
The repository recorded zero commits and zero active maintainers in the last 3 months, indicating maintenance has effectively stopped for about 2 years and 6 months.
A README is present, and the package is a compact integration module where tests and a changelog need not be shipped in the artifact. The repository also lacks tests and a changelog, limiting maintenance transparency.
The registry namespace and repository owner are aligned under the gabela-framework project, but the repository owner is an individual account rather than an organization, offering limited backing evidence.
The package has only three releases, all concentrated in March 2024, with no releases in the following 2 years and 6 months. That is a meaningful sign of an inactive project, even for a small integration module.
There are no open issues or pull requests and no recent issue or pull-request activity. This is not inherently unhealthy for a tiny stable module, but it provides no evidence of active maintenance.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
payfast/payfast-php-sdk Version ^1.1 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.