php-junior/laravel-2c2p

Release historydanger

The latest release was published in September 2017, and there have been no releases in roughly nine years. This is strong evidence of abandonment for a payment integration package.

Repo commit activitydanger

The repository recorded zero commits and zero active maintainers in the last three months, consistent with its last push in October 2017. No newer maintenance signal compensates for this long inactivity.

Package file treecaution

The published artifact contains only 14 files and includes certificate and private-key files, which makes the release contents harder to audit and maintain safely. The repository name and README do match the package.

Repo toolingcaution

Composer is used for the build, but no security-scanning tools are configured. That leaves a payment-focused package without visible automated security checks.

Security policycaution

The linked repository has no security policy. For a package handling payment credentials and transactions, this is a meaningful transparency and maintenance gap.