pkgb6xss/payload-pkg2

This is a newly published, minimally scaffolded package with only one release and a single composer.json file, so its maturity and maintenance track record are unproven. The MIT declaration, stable 1.0.0 version, absence of deprecation, lack of install-time scripts, and simple dependency profile are positive, but the absence of README, tests, changelog, security policy, security tooling, and repository activity limits transparency. The linked repository also does not match the package name and provides no README evidence tying it to this package, creating a meaningful supply-chain provenance concern. It may be suitable for experimentation, but it is a liability as an established production dependency until it develops clearer provenance and maintenance evidence.

Latest 1.0.0Packagist

Vulnerabilities

We didn't find any vulnerabilities for this package.