promisepay/promisepay-php

Licensecaution

The artifact contains an MIT license file only under a vendored dependency, while the package itself has no declared or repository license file. That leaves the licensing status of the package unclear.

Release historycaution

The package has had no registry release in about 9 years, despite 20 releases historically. This is strong evidence of abandonment risk, though the established release history provides some maturity.

Repo commit activitycaution

There were no commits and no active maintainers in the last 3 months, consistent with the repository having received no push for about 7 years. This materially raises abandonment risk.

Repo issue activitycaution

There were no new or closed issues or pull requests in the last month, with three issues still open. The quiet issue tracker reinforces the lack of current maintenance evidence.

Repo toolingcaution

Composer is used for builds, which supports reproducible project structure, but no security scanning tool is present. The missing scanning is a modest transparency and maintenance gap.