Package Health

paysera/lib-checkout-integration-sdk

The package includes a substantial README, changelog, release notes, and a security policy. Its young history and no recorded commits in three months limit confidence, despite a repository push today.

Latest 3.5.0PackagistPackagist

76%

Total Score

Maintainer Stability
Maintainer Stability
Assesses the consistency and reliability of package maintainers

75

Dependencies
Dependencies
Evaluates the health and security of package dependencies

100

Maturity
Maturity
Indicates package age, release frequency, and adoption metrics

86

Supply Chain
Supply Chain
Evaluates supply chain security practices and risks

100

Health Score Breakdown

Licensecaution

The manifest declares LGPL-3.0-or-later, and a license file is present in both the artifact and repository. The detected file text names LGPL-3.0 and GPL-3.0, so the declaration and detected licensing are not perfectly aligned.

Repo commit activitycaution

The repository records zero commits and zero active maintainers over the last three months, which weakens evidence of ongoing maintenance; the push today and frequent releases partly offset this concern.

Repo toolingcaution

Composer build tooling is present, but no security scanning tools were detected. That is a hygiene gap for a payment integration library, though it is not evidence of abandonment by itself.

Vulnerabilities

We didn't find any vulnerabilities for this package.

Package versions

Maintainers

Paysera

Direct Dependencies

DependencyLast ReleaseScore
psr/log
Version ^1.1 || ^3.0
psr/cache
Version ^1.0 || ^2.0 || ^3.0
psr/clock
Version ^1.0
nyholm/psr7
Version ^1.8
psr/container
Version ^1.1 || ^2.0

Weekly Downloads

Info

Last Published
21 hours ago
Created
2 months ago

Are You Affected?

Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.

Free. No credit card required.

Aikido Platform