Package Health/mastercard/merchant-identifier

mastercard/merchant-identifier

The stable major version and minimal runtime dependency surface are positive. However, the package has had no release or repository activity for over seven years, and its source repository is archived; the license files also disagree with the manifest.

Latest 2.0.0

Packagist

Total Score

Maintainer Stability

Dependencies

100

Maturity

Supply Chain

100

Using this package? Scan for Free

Health Score Breakdown

Registry deprecation

Packagist marks the entire package as abandoned, with no replacement identified. This is a severe adoption risk even though the package is not merely withdrawing one release.

Release history

The latest release was published over seven years ago, with zero releases in the last 12 months. The seven-release history shows the package was once established, but not that it remains maintained.

Repo commit activity

The repository recorded zero commits and zero active maintainers in the last three months. This confirms the abandonment indicated by the archived repository and stale release history.

Repository archived

The linked Mastercard repository is archived and was last pushed over five years ago, indicating the source is no longer maintained. Organizational ownership does not compensate for an explicitly archived project.

License

The artifact contains a recognized Apache-2.0 license file while the manifest declares BSD-2-Clause. Both provide licensing information, but the mismatch creates avoidable legal uncertainty.