hongyi/pay

The MIT license, stable version, and lack of install-time scripts reduce adoption and installation concerns. Future maintenance is less certain because the project has had no release in 12 months, no commits in the last 3 months, and lacks security scanning.

Latest 1.3.10

Packagist

58%

Total Score

Maintainer Stability

Maturity

Supply Chain

Health Score Breakdown

Release history

The package is 432 days old with 17 releases, but it has had no releases in the last 12 months. That extended release gap is a meaningful maintenance concern for a payment integration.

Repo commit activity

The repository recorded 0 commits and 0 active maintainers during the last 3 months. This indicates little recent development activity and raises the risk that defects or platform changes may go unaddressed.

Repo tooling

Composer is used for the build, but no security scanning tools are configured. For a payment package, this leaves an important maintenance and review safeguard unobserved.

Security policy

The repository has no security policy. That reduces transparency about how payment-related vulnerabilities should be reported and handled.

Workflow audit

The single workflow has top-level write permissions and its only action reference is unpinned. The audit found no high-confidence workflow findings or untrusted checkout paths, so this is a hygiene concern rather than a severe risk.