Package Health/nexi-checkout/php-payment-sdk

nexi-checkout/php-payment-sdk

This release appears usable but warrants some caution. The package has a clear MIT license, a substantial artifact with extensive examples, a linked organization-owned repository, no deprecation, no install-time lifecycle scripts, and a regular release history over roughly 20 months. However, it remains a 0.x package, the repository shows no commits or active maintainers in the last 3 months despite the current release, and the project has no security policy or security-scanning tooling. The repository is not archived and contains tests, which partially offset the maintenance and transparency concerns, but dependency adoption should include monitoring for renewed development activity and API stability.

Latest 0.16.0

Packagist

68%

Total Score

Maintainer Stability

Dependencies

100

Maturity

Supply Chain

Health Score Breakdown

Repo commit activity

The repository recorded zero commits and zero active maintainers over the last 3 months. This is a meaningful maintenance concern, although the recent release history and current repository push provide partial compensating evidence.

Repo issue activity

There are no open issues or pull requests and no recent issue or pull-request activity; this is not inherently negative for a small stable SDK, but it provides little evidence of active community maintenance.

Repo tooling

The repository uses Make and Composer build tooling, but no security-scanning tools are detected. The build tooling is positive, while the missing security automation is a transparency and maintenance gap.

Security policy

No security policy was found in the repository, leaving vulnerability-reporting expectations and project security communication unclear.

Version stability

Version 0.16.0 is not a stable-major release, so consumers should expect less API compatibility assurance even though it is not a prerelease and recent releases are not dominated by prerelease versions.