izyue/yii2-alipay

The package is small and easy to inspect, with only one runtime dependency. Its documentation is too thin for integration, and the lack of tests and security policy reduces confidence in long-term upkeep.

Latest 0.0.1

Packagist

38%

Total Score

Maintainer Stability

Dependencies

100

Maturity

Supply Chain

Health Score Breakdown

Package scaffolding

The artifact has a README, and release notes exist for this version, but the README is only 14 characters and the project has no tests or changelog. Missing tests and changelog are not packaging gaps by themselves, while the extremely limited consumer documentation is a real concern for this library.

Release history

Only one release exists, first and latest published about 10 years ago, with no releases in the last 12 months. This is strong evidence of abandonment risk despite the package not being deprecated.

Repo commit activity

The repository recorded zero commits and zero active maintainers in the last three months, consistent with the package's long release gap. The repository is not archived, but there is no observed recent maintenance.

Repo tooling

The repository uses Composer, which supports reproducible package management, but no security-scanning tools were detected. This is a modest transparency and maintenance concern rather than evidence of an unsafe release.

Security policy

No security policy was found in the linked repository. For a package handling payment integration, that leaves vulnerability reporting and response expectations unclear.