Package Health

hedeqiang/payease

首信易支付 SDK for PHP

Latest v2.0.4PackagistPackagist

45%

Total Score

unhealthy

Risky: no release or commit activity since June 2022 creates a substantial maintenance risk.

Health Score Breakdown

Lifecycle scriptscaution

Post-install and post-update scripts run during Composer operations, adding execution complexity for consumers. No provided evidence shows those scripts are unsafe, so this is a limited concern.

Maintainerscaution

Only one registry account has publishing access, and the repository is user-owned rather than organization-backed. This leaves limited visible publishing and continuity capacity.

Project backingcaution

The registry namespace and repository are owned by the same individual, and there is no organization backing shown. This is consistent ownership but provides limited evidence of maintenance capacity.

Release historycaution

The latest release was about 4 years ago, with no releases in the last 12 months. This is strong evidence of slowing or stopped maintenance.

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers during the last 3 months, consistent with the last push occurring about 4 years ago.

Vulnerabilities

We didn't find any vulnerabilities for this package.

Package versions

Maintainers

hedeqiang

Direct Dependencies

DependencyLast ReleaseScore
guzzlehttp/guzzle
Version ^6.3|^7.4
—
—
symfony/psr-http-message-bridge
Version ^1.0|^2.1
—
—

Weekly Downloads

Info

Last Published
4 years ago
Created
4 years ago

Are You Affected?

Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.

Free. No credit card required.

Aikido Platform