Package Health/itemvirtual/ecommerce-paypal

itemvirtual/ecommerce-paypal

The package includes clear usage documentation, a changelog, release notes for this version, and a matching source repository. Its narrow dependency set and MIT licensing are helpful, but the project shows limited ongoing activity and lacks visible security tooling.

Latest 1.0.1

Packagist

58%

Total Score

Maintainer Stability

Dependencies

100

Maturity

Supply Chain

Health Score Breakdown

Release history

The package has only two releases since January 2022, with no releases in the last 12 months and a median interval of about 670 days. This points to limited maintenance capacity for a payment integration.

Repo commit activity

The repository recorded no commits and no active maintainers in the last 3 months, consistent with the last push in November 2023. That inactivity increases the risk that compatibility or payment-platform changes will go unaddressed.

Repo popularity

The repository has 0 stars and 0 forks, with 2 watchers. Popularity is only supporting evidence, but these low adoption indicators provide little evidence of broad community scrutiny or backup.

Repo tooling

Composer build tooling is present, but no security scanning tools were detected. For a package handling payment integration, the missing security checks are a meaningful hygiene gap.

Security policy

The repository has no security policy. This weakens transparency around reporting and handling vulnerabilities, although it does not by itself show that the code is unsafe.