givepay/givepay-gateway

The small project footprint and absent security policy provide limited support and transparency. A documented README, tests, and explicit GPL license help, but the release and repository activity are too old for a payment library without strong evidence of current maintenance.

Latest v0.12

Packagist

40%

Total Score

Maintainer Stability

Maturity

Supply Chain

Health checks

Release history

The latest release was published about seven years ago, and there were no releases in the last 12 months. Although the package had 11 releases with a regular earlier cadence, the long current gap materially raises abandonment and compatibility risk.

Repo commit activity

The repository recorded no commits and no active maintainers in the last three months, consistent with the multi-year release gap. The repository is not archived, but there is no observed recent maintenance to compensate.

Repo popularity

The repository has 1 star, 0 forks, and 1 watcher, giving little evidence of a broad user or contributor base that might support the package if maintenance stops.

Repo tooling

Composer build tooling is present, but no security-scanning tools were detected. This is a modest hygiene concern rather than a severe risk, since the package still has tests and a reproducible dependency tool.

Security policy

No repository security policy was found. For a payment-transaction library, this is a meaningful transparency gap because users have no documented channel or process for reporting security issues.