gzdsx/alipay-sdk

The focused source tree and MIT declaration make the package easy to inspect. There is no repository test coverage or security policy, making future changes harder to validate and maintain.

Latest 1.1.0

Packagist

40%

Total Score

Maintainer Stability

Dependencies

100

Maturity

Supply Chain

Health Score Breakdown

Release history

This package has only one release, published about 3 years and 6 months ago, with no releases in the last 12 months. That is strong evidence of abandonment risk, despite the package not being deprecated.

Repo commit activity

The repository recorded no commits and no active maintainers in the last 3 months, consistent with the long release gap. The repository is not archived, but there is no observed recent maintenance.

Package scaffolding

The artifact has no README, tests, or changelog, while the repository does contain a README and GitHub releases are used. Missing tests remain a maintenance gap, although the missing artifact README is compensated by the repository documentation.

Repo popularity

The repository has 0 stars and 0 forks, with 1 watcher. Popularity is only supporting evidence, but these figures provide little external evidence of adoption or review.

Repo tooling

Composer is used for builds, which is appropriate for this PHP package, but no security-scanning tools are configured. That leaves dependency and code security checks un evidenced.