ramprasadm1986/yii2-paypal

Release historydanger

The package has only two releases, both in November 2020, and none in nearly six years. That long release gap is strong evidence of abandonment risk.

Repo commit activitydanger

The repository recorded zero commits and zero active maintainers in the last three months, consistent with the nearly six-year release gap and providing no evidence of current maintenance.

Package file treecaution

The artifact and repository each contain only four files, including one PHP source file and a 13-character README. This is a very thin project structure for a payment integration and limits transparency about testing and usage.

Package scaffoldingcaution

The README is present and a GitHub release exists for this version, but the repository has no tests or changelog and the README contains only a title. Missing tests and documentation weaken reviewability, although tests and changelogs are not expected in every published artifact.

Repo toolingcaution

Composer is used for builds, but no security-scanning tool is present. That reduces evidence of automated security review without proving the package is unsafe.