Package Health/payum/payum-bundle-sandbox

payum/payum-bundle-sandbox

The repository has tests, a README, and a matching MIT license, but its 30 runtime dependencies and absent security policy add maintenance overhead. Its repository does not name this package, so provenance is less clear.

Latest 0.10.0

Packagist

42%

Total Score

Maintainer Stability

Dependencies

Maturity

Supply Chain

Health Score Breakdown

Release history

The latest registry release was nearly 10 years ago, with no releases in the last 12 months. This is strong evidence that the published package is stale.

Dependency profile

The package declares 30 runtime dependencies across payment providers, frameworks, and database integrations. That broad dependency surface increases compatibility and maintenance burden for an old release.

Lifecycle scripts

The package uses post-install and post-update Composer scripts. These require execution during installation, adding some operational exposure, but lifecycle scripts are common in this ecosystem and no harmful behavior is shown here.

Repo commit activity

There were no commits or active maintainers in the last 3 months, although the repository was pushed in January 2023. Recent maintenance capacity is therefore weak.

Repo package mention

The linked repository name does not match the package name and its README does not mention the package, making it less clear that this repository directly owns the published artifact.

Vulnerabilities

We didn't find any vulnerabilities for this package.

Package versions

Maintainers

No maintainer information available.

Direct Dependencies

Dependency	Last Release	Score
payum/payum Version ^1.3	—	—
doctrine/orm Version ^2.5	—	—
omnipay/paypal Version ^2	—	—
omnipay/stripe Version ^2	—	—
klarna/checkout Version ^4	—	—