macklus/yii2-ceca-tpv

The package has a clear license, a usable README, and only one runtime dependency. Its source repository has no tests or security scanning, making the long-standing lack of maintenance harder to validate or address.

Latest 1.0.0

Packagist

42%

Total Score

Maintainer Stability

Dependencies

100

Maturity

Supply Chain

Health Score Breakdown

Release history

This is the only release, published about 10 years and 4 months ago, with no releases in the last 12 months. That is strong evidence of abandonment despite the stable 1.0.0 version.

Repo commit activity

There were zero commits and zero active maintainers in the last three months, and the last repository push was about 10 years and 4 months ago. This is a severe abandonment risk.

Project backing

The repository is owned by the same individual namespace as the package, but it has user rather than organization backing. That is consistent ownership without evidence of broader maintenance capacity.

Repo popularity

The repository has zero stars and forks and only one watcher. Popularity is supporting evidence rather than a verdict, but these counts provide little indication of community support.

Repo tooling

Composer build tooling is present, but no security scanning tools are configured. The missing scanning is a meaningful transparency and maintenance gap for a payment-related integration.