Risky to adopt: the package has had no release or repository activity for over four years, despite having tests, documentation, and a matching source repository. Its payment-integration role makes this level of abandonment a significant maintenance liability.
45%
Total Score
33
100
64
80
The package has 24 releases, but none in the last 12 months and the latest release was in February 2022, over four years ago. That long release gap is strong evidence of abandonment risk.
There were zero commits and zero active maintainers in the last three months, consistent with the release history and indicating that maintenance has effectively stopped.
The repository and registry package are owned by the same individual, providing direct ownership alignment, but no organizational backing is shown to compensate for the lack of recent activity.
There were no new or merged pull requests and no issue activity in the last month. This supports the inactivity concern, although the missing open-issues count limits the assessment.
Composer build tooling is present, but no security scanning tools are configured. The missing scanning is a transparency and maintenance gap, though not severe by itself.
We didn't find any vulnerabilities for this package.
No maintainer information available.
| Dependency | Last Release | Score |
|---|---|---|
omnipay/common Version ^3 | — | — |
iyzico/iyzipay-php Version ^2 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.