Package Health

laranex/php-myanmar-payments

PHP SDK for Myanmar payment gateways: KBZ Pay, Wave Money, AYA Pay, Yoma MMQR and CyberSource. Framework-agnostic, typed requests and results, works with any PSR-18 HTTP client.

Latest v4.0.0-alpha.4PackagistPackagist

62%

Total Score

caution

A one-day-old alpha release with all four workflow actions unpinned needs extra supply-chain caution.

Health Score Breakdown

Release historycaution

The package is only 1 day old with four releases, so its maintenance record is too short to establish long-term reliability. Rapid early releases provide some evidence of active development but do not offset the limited history.

Repo toolingcaution

Composer build tooling is present, but no security-scanning tool was detected. That is a modest transparency gap for a payment-related SDK, though it is not evidence of unsafe code by itself.

Security policycaution

The repository has no security policy, leaving vulnerability-reporting and response expectations undocumented. This is a maintenance and transparency gap for software handling payment integrations.

Version stabilitycaution

This release is explicitly a prerelease, and all recent releases are prereleases. That signals an evolving API and greater compatibility risk for dependents.

Workflow auditcaution

The single workflow was fully audited, uses read-only permissions, and has no untrusted checkout or injection findings. However, all four analyzed action references are unpinned, leaving them exposed to upstream reference changes.

Vulnerabilities

We didn't find any vulnerabilities for this package.

Package versions

Maintainers

Nay Thu Khant

Direct Dependencies

DependencyLast ReleaseScore
psr/http-client
Version ^1.0
—
—
psr/http-factory
Version ^1.0
—
—
psr/http-message
Version ^1.0||^2.0
—
—
psr/simple-cache
Version ^2.0||^3.0
—
—
php-http/discovery
Version ^1.9.1
—
—

Weekly Downloads

Info

Last Published
5 hours ago
Created
2 days ago

Are You Affected?

Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.

Free. No credit card required.

Aikido Platform