icekristal/robokassa-for-laravel

Project backingcaution

The package and repository are owned by the same individual account, providing clear ownership but no organizational backing to offset the thin maintenance record.

Release historycaution

The package has only two releases, with the latest published in March 2024 and none in the last 12 months. This indicates limited maintenance activity, though a small integration package may not need frequent releases.

Repo commit activitycaution

There were zero commits and zero active maintainers in the last three months, consistent with the latest release being over two years old. This is a meaningful abandonment concern for a payment integration.

Repo issue activitycaution

There are two open pull requests but no new or closed issues or merged pull requests in the last month. This shows some unresolved contribution activity but no evidence of active project response.

Repo toolingcaution

Composer is used as the build tool, but no security scanning tools are configured. The missing scanning is a modest transparency and maintenance gap, not evidence of unsafe code by itself.