lifepay_codeception/module-yii2

Release historycaution

The package has had no release in roughly 22 months, despite ten releases since February 2023. This is a meaningful maintenance concern, although the repository is not archived and the latest release is stable.

Repo commit activitycaution

There were zero commits and zero active maintainers in the last three months, consistent with a project that has been inactive since November 2024. This raises abandonment risk.

Repo toolingcaution

The repository uses Composer for builds, but no security scanning tools were detected. The missing scanning is a hygiene limitation rather than evidence that the package is unsafe.

Security policycaution

The repository has no security policy. This reduces transparency for reporting and handling vulnerabilities, though it is a secondary concern for this small integration module.

Workflow auditcaution

The single workflow was fully audited with no untrusted checkouts or script injections, but both of its two action references are unpinned. That is a modest build-supply-chain hygiene gap.