johnxu/payment

Release historydanger

The package has 11 releases, but none in the last 12 months; its latest release was published about 6 years and 7 months ago. This is strong evidence of abandonment risk.

Repo commit activitydanger

The repository recorded 0 commits and 0 active maintainers in the last 3 months, consistent with the long release gap and indicating no visible ongoing maintenance.

Maintainerscaution

Only one registry publishing account, johnxu, is listed. This creates a thin publishing base and limited continuity if that maintainer becomes unavailable.

Repo toolingcaution

Composer is used for builds, which is appropriate, but no security scanning tools are present. This is a maintenance and assurance gap, though not evidence of an unsafe release by itself.

Security policycaution

The linked repository has no security policy, reducing transparency about how vulnerabilities should be reported and handled.