mendicm/sermepa-omnipay

Its repository has no security policy, no security scanning, and almost no visible adoption. The package is small and focused, with a clean dependency profile and a declared GPLv2 license, but those positives do not offset the maintenance risk.

Latest v0.2.1

Packagist

35%

Total Score

Maintainer Stability

Dependencies

100

Maturity

Supply Chain

Health Score Breakdown

Release history

The package has had only two releases, with no releases in the last 12 months and its latest release dating to 2016, indicating severe abandonment risk.

Repo commit activity

The repository recorded zero commits and zero active maintainers in the last three months, consistent with the package's long release gap and indicating no current maintenance.

Repo package mention

The repository name matches the package, so the source appears aligned; the README does not mention the package name, a minor transparency gap rather than evidence that the repository is unrelated.

Repo popularity

The repository has 0 stars and 0 forks, with only 1 watcher; popularity is not decisive, but this provides no supporting evidence of active community use or review.

Repo tooling

Composer is used for builds, which is appropriate, but no security scanning tools are configured, reducing automated oversight of dependency and code risks.