ratepay/oxid6-payment

The module has a clear MIT license, a readable package, and release notes for version 6.2.4. Its dependency list is small and install scripts are absent, while security documentation and automated scanning are not provided.

Latest 6.2.4

Packagist

69%

Total Score

Maintainer Stability

Dependencies

100

Maturity

Supply Chain

Health Score Breakdown

Repo bus factor

One contributor made all commits in the last three months, producing a 100% top-contributor share. Organizational ownership helps with handoff potential, but no second active contributor is shown.

Repo commit activity

Only one commit was recorded in the last three months, showing limited recent repository activity. Recent registry releases partly offset this, but the source activity remains thin.

Repo package mention

The repository name does not match the package name and its README does not mention this package. The organization match makes a monorepo or related-module explanation plausible, but the missing README reference still leaves package ownership less transparent.

Repo tooling

Composer is used for builds, but no security-scanning tool is reported. This is a modest transparency and maintenance gap rather than evidence that the release is unsafe.

Security policy

The linked repository has no security policy. That weakens vulnerability-reporting transparency, although it is not by itself evidence of abandonment.