Fork from mercadopago/dx-php changing the dependencies versions.
58%
Total Score
caution
Usable with caveats: nearly five years without a release and no recent commit activity raise maintenance concerns.
The package has 35 releases, but the latest was nearly five years ago and there were no releases in the last 12 months. This is substantial evidence of stalled maintenance despite the earlier release history.
The repository had zero commits and zero active maintainers in the three months measured. The 2024 push prevents this from proving abandonment, but it still indicates no recent development momentum.
There were no new or merged pull requests in the measured month and no issue counts were available. This supports the maintenance concern, though the missing issue count limits the conclusion.
Composer is used for builds, but no security scanning tools are configured. That is a transparency and hygiene gap rather than evidence that the release is unsafe.
The repository has no security policy, leaving vulnerability reporting and response expectations undocumented. This is a modest transparency gap for an SDK handling payment integrations.
We didn't find any vulnerabilities for this package.
No direct dependencies.
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.