isign/gateway-sdk-php

Registry deprecationdanger

Packagist marks the entire package abandoned and names dokobit/gateway-php-sdk as its replacement. This is a major adoption risk that outweighs the recent release and repository activity.

Release historycaution

The package has existed since 2018 and released v1.3.2 recently, but only one release appeared in the last 12 months, indicating a limited current cadence.

Repo bus factorcaution

One contributor made all commits during the last three months, leaving maintenance dependent on a single currently active person. Organizational backing provides some handoff capacity but does not remove the concentration risk.

Repo commit activitycaution

Only one commit was recorded in the last three months. A recent release offsets this somewhat, but the observed maintenance activity is thin.

Repo toolingcaution

Composer is used for builds, but no security-scanning tooling was detected. The absence of scanning is a modest transparency and maintenance gap.