mobupay/module-payment

Clear documentation, release notes, and a license make integration easier. The small dependency set, security policy, and lack of install-time scripts are reassuring, but the project still has limited operating history.

Latest v1.1.0

Packagist

67%

Total Score

Maintainer Stability

Dependencies

100

Maturity

Supply Chain

Health Score Breakdown

Release history

The package is only 62 days old with two releases and a median interval of about 34 days. That shows recent activity but does not yet establish a long maintenance record.

Repo bus factor

One contributor made all four commits in the last three months. Organization ownership provides some handoff capacity, but no second active contributor is shown.

Repo commit activity

Four commits were made in the last three months, indicating activity, but all came from one active maintainer, limiting evidence of durable maintenance capacity.

Repo tooling

Composer build tooling is present, but no security scanning tool was detected, leaving a modest verification gap for a payment integration.

Workflow audit

The single workflow was fully analyzed with no audit findings or untrusted sinks. However, its top-level token permissions are write-enabled and its only action reference is unpinned, creating mild workflow hygiene risk.