qy/ruhua

Release historydanger

The latest release was published in August 2020, about six years ago, and there have been no releases in the last 12 months. Twenty historical releases show prior activity but do not compensate for the prolonged pause.

Repo commit activitydanger

The repository recorded zero commits and zero active maintainers in the last three months, consistent with the latest push being about six years ago. This is strong evidence of abandonment risk.

Repo popularitycaution

The repository has 0 stars, 0 forks, and 1 watcher, providing little evidence of an active user or contributor community. Popularity is supporting evidence, but this reinforces the maintenance concern.

Repo toolingcaution

Composer build tooling is present, but no security-scanning tools are configured. The missing scanning reduces maintenance assurance for a package with payment-related source files.

Security policycaution

The repository has no security policy, leaving no documented process for reporting or handling vulnerabilities. This is a transparency and maintenance gap, though it is less severe than the inactivity.