idci/payment-bundle
This is a mature, actively published Symfony payment bundle with more than seven years of history, 105 releases, a stable current major version, a recent release, an unarchived organization-owned repository, clear licensing, tests, documentation, and a substantial source tree. The main concerns are that repository commit activity shows no commits or active maintainers in the last three months, the repository has very little adoption evidence, and it lacks security scanning, a security policy, and CI workflows; these reduce confidence in ongoing maintenance and security hygiene but do not by themselves make the release unfit to depend on.
72%
Total Score
88
50
89
90
Health Score Breakdown
The package declares 18 runtime dependencies, including several payment-provider SDKs and Symfony components, creating a comparatively broad maintenance and transitive-dependency surface. This is partly expected for a bundle integrating many payment gateways but still warrants dependency review.
No commits and no active maintainers were recorded in the last three months. This conflicts with the recent release and repository push, but the observed short-term coding inactivity remains a caution for ongoing maintenance capacity.
The repository has only 1 star, 1 fork, and 3 watchers, providing little external adoption evidence. Low popularity is supporting evidence rather than a verdict, but it modestly limits confidence in ecosystem scrutiny.
The repository uses Make and Composer, showing basic build tooling, but no security scanning tools are configured. The missing security automation is a genuine hygiene gap for a payment-related package.
No repository security policy was found. For a package handling payment integrations, this is a meaningful disclosure and maintenance-process gap.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
 Benjamin Boudier |
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 ramsey/uuid Version ^4.0 || ^5.0 || ^6.0 | — | — |
symfony/form Version ^4.0 || ^5.0 || ^6.0 | — | — |
symfony/intl Version ^4.0 || ^5.0 || ^6.0 | — | — |
payum/iso4217 Version ~1.0 | — | — |
symfony/process Version ^4.0 || ^5.0 || ^6.0 | — | — |
Weekly Downloads
Info
- Last Published
- 11 days ago
- Created
- 7 years ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.