morilog/paymand
The artifact includes tests and no install-time scripts, which supports a straightforward dependency. Its repository could not be found, so maintenance and provenance cannot be verified.
35%
Total Score
50
70
100
Health Score Breakdown
The package has had no release in more than seven years: its latest release was on June 25, 2019, with no releases in the last 12 months. This is strong evidence of abandonment risk.
Eight runtime dependencies create some maintenance surface, and phpunit/phpunit being listed among runtime dependencies with no dev dependencies suggests imperfect dependency classification. The profile is not large enough to be severe on its own.
The artifact contains tests, which is a small positive for maintainability, but it has no readme; that makes integration harder for a library consumers must understand.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
No maintainer information available.
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 psr/log Version ^1.0 | — | — |
beberlei/assert Version ^3.0 | — | — |
phpunit/phpunit Version ^7.4 | — | — |
guzzlehttp/guzzle Version ^6.3 | — | — |
Weekly Downloads
Info
- Last Published
- 7 years ago
- Created
- 7 years ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.