pinaadrian/cybersource

The clear README, MIT license, and simple dependency set make the package understandable. Its source and releases have been untouched since June 2018, with one maintainer and no security policy or scanning. Pinning this version leaves substantial maintenance risk.

Latest v1.0.1

Packagist

42%

Total Score

Maintainer Stability

Dependencies

100

Maturity

Supply Chain

Health Score Breakdown

Release history

The package has only two releases, both from June 2018, and none in the last eight years. This strongly indicates abandonment for a payment integration.

Repo commit activity

The repository recorded zero commits and zero active maintainers in the last three months, consistent with no source activity since June 2018. The package is not archived, but it has no visible maintenance.

Maintainers

A single registry maintainer provides little continuity if that person becomes unavailable. The matching personal repository offers some ownership clarity but does not compensate for the lack of recent activity.

Repo popularity

The repository has only 2 stars and 1 fork, providing little community evidence or likely external review. Low popularity is supporting evidence rather than a verdict by itself.

Repo tooling

Composer is used for the build, but no security scanning tools are present. This is a hygiene gap that adds concern alongside the project's long inactivity.