Package Health

kazist/payments

Risky to adopt for new payment functionality: the package has had no release or repository activity for about eight years. It is licensed, not deprecated or archived, and the organization-backed repository matches the package, but maintenance and consumer documentation are very weak.

Latest 1.1.16PackagistPackagist

42%

Total Score

Maintainer Stability
Maintainer Stability
Assesses the consistency and reliability of package maintainers

50

Maturity
Maturity
Indicates package age, release frequency, and adoption metrics

72

Supply Chain
Supply Chain
Evaluates supply chain security practices and risks

88

Health Score Breakdown

Release historydanger

The latest release was published on July 26, 2018, and there were no releases in the following 12 months; this indicates prolonged abandonment despite the package having 56 historical releases.

Repo commit activitydanger

The repository recorded zero commits and zero active maintainers in the last three months, consistent with the release history showing no maintenance for about eight years.

Package scaffoldingcaution

The artifact includes a README, but it is only 11 characters long and provides no meaningful usage guidance for a payment package. Missing tests and a changelog in the published artifact are normal packaging practice and are not concerns by themselves.

Repo popularitycaution

The repository has zero stars and forks and only one watcher, providing little community evidence to offset the long maintenance gap, though popularity is supporting evidence rather than a verdict.

Repo toolingcaution

Composer is used as the build tool, but no security scanning tools are present; this is a transparency and maintenance gap rather than evidence of malicious behavior.

Vulnerabilities

We didn't find any vulnerabilities for this package.

Package versions

Maintainers

Dedan Irungu

Direct Dependencies

No direct dependencies.

Weekly Downloads

Info

Last Published
8 years ago
Created
9 years ago

Are You Affected?

Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.

Free. No credit card required.

Aikido Platform