jetfueltw/xmtpay-php

Registry deprecationdanger

Packagist marks the entire package as abandoned, with no replacement listed. This is a direct warning against taking a new dependency on this release.

Release historydanger

The package has only three releases, all from October 2018, with no release in about eight years. The absence of recent release activity strongly indicates abandonment.

Repository archiveddanger

The linked repository is archived and was last pushed about eight years ago, indicating the project is no longer maintained. This is severe for a payment integration.

Repo toolingcaution

Composer is used for the build, which fits the package ecosystem, but no security-scanning tools are present. That is a modest assurance gap for a payment package.

Security policycaution

The repository has no security policy, leaving no documented process for reporting or handling vulnerabilities. This adds a transparency concern, though it is secondary to the abandonment signals.