payone-gmbh/oxid-6

This is a healthy, mature release with a 9-year history, 33 releases, five releases in the last 12 months, a stable version profile, current repository activity, and organizational backing from PAYONE-GmbH. The package and repository include substantial documentation, tests, a changelog, licensing, security policy, Composer tooling, security scanning, and no detected dangerous workflow patterns. The main reservations are modest recent activity at four commits in three months, concentration of 75% of recent commits in one contributor, and workflows that do not declare top-level token permissions; these are hygiene and resilience concerns rather than evidence of abandonment. Dependency and maintainer-specific signals were not provided, so confidence is not maximal.

Latest v1.13.2Packagist

Health Score Breakdown

Repo commit activitycaution

The repository recorded 4 commits from 2 active maintainers in the last 3 months, indicating current but relatively light maintenance activity.

Token permissionscaution

Both workflows lack top-level token-permission declarations. No workflow requests top-level write access, which limits the concern, but explicit least-privilege permissions would improve CI security hygiene.

View all 18 health checks

Vulnerabilities

We didn't find any vulnerabilities for this package.