Package Health/hariom/sumup-gateway-integration

hariom/sumup-gateway-integration

The MIT license, README, and absence of install-time scripts make the package straightforward to inspect and install. Its very small project has no tests, no security policy, one registry maintainer, and no recent development, leaving payment-provider compatibility and long-term support uncertain.

Latest v1

Packagist

38%

Total Score

Maintainer Stability

Maturity

Supply Chain

Health Score Breakdown

Release history

The package has only one release, published nearly 9 years ago, with no releases in the last 12 months. This is strong evidence that the dependency is no longer actively maintained.

Repo commit activity

The repository recorded no commits and no active maintainers in the last 3 months, and its last push was nearly 5 years ago. The non-archived status does not compensate for this prolonged inactivity.

Maintainers

Only one person has registry publish access, which gives the release a thin publishing base. This is more concerning alongside the absence of recent repository activity, though access records alone do not prove maintenance capacity.

Repo tooling

Composer build tooling is present, but no security-scanning tooling was detected. The lack of scanning is a modest hygiene gap rather than evidence that the package is unsafe by itself.

Security policy

The repository has no security policy, leaving no documented channel or process for reporting vulnerabilities in a payment integration. No other provided signal compensates for this transparency gap.