首信易支付 SDK for PHP
45%
Total Score
unhealthy
Risky: no release or commit activity since June 2022 creates a substantial maintenance risk.
Post-install and post-update scripts run during Composer operations, adding execution complexity for consumers. No provided evidence shows those scripts are unsafe, so this is a limited concern.
Only one registry account has publishing access, and the repository is user-owned rather than organization-backed. This leaves limited visible publishing and continuity capacity.
The registry namespace and repository are owned by the same individual, and there is no organization backing shown. This is consistent ownership but provides limited evidence of maintenance capacity.
The latest release was about 4 years ago, with no releases in the last 12 months. This is strong evidence of slowing or stopped maintenance.
The repository recorded zero commits and zero active maintainers during the last 3 months, consistent with the last push occurring about 4 years ago.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
guzzlehttp/guzzle Version ^6.3|^7.4 | — | — |
symfony/psr-http-message-bridge Version ^1.0|^2.1 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.