基于yansongda/pay修改
42%
Total Score
69
75
Only three releases were published, with the latest release over three years ago and no releases in the past 12 months. This is strong evidence of abandonment risk.
The repository has zero stars, forks, and watchers. Popularity is only supporting evidence, but these values provide no community signal to compensate for the lack of recent activity.
The repository is not archived, which keeps ongoing maintenance possible, but its last push was over three years ago and does not offset the stale release history.
The repository has no security policy, leaving disclosure and response expectations undocumented. This is a transparency gap for a payment integration library.
The latest version is 0.0.3 rather than a stable major release, indicating an immature compatibility and maintenance baseline. The documented package structure provides some compensation but does not remove the concern.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
psr/log Version ^1.1 | ^2.0 | ^3.0 | — | — |
psr/container Version ^1.1 | ^2.0 | — | — |
psr/http-client Version ^1.0 | — | — |
psr/http-message Version ^1.0 | — | — |
yansongda/supports Version ~3.2.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.