shabayek/laravel-payment

Release historydanger

The package has had 11 releases since December 2021, but none in the last 12 months and the latest recorded release was in April 2022. This long release gap materially raises abandonment risk.

Repo commit activitydanger

The repository recorded no commits and no active maintainers in the last three months, consistent with the extended release gap. That indicates the project is not currently maintained.

Security policycaution

The repository has no security policy. For a payment integration package, the absence of a documented vulnerability-reporting path is a meaningful transparency gap.

Version stabilitycaution

The package remains pre-1.0, and the registry reports v0.7.0 as the latest version while this assessment targets v0.8.0. The pre-1.0 status adds compatibility uncertainty, though it is less important than the maintenance evidence.

Workflow auditcaution

The only workflow was fully analyzed with no dangerous triggers, untrusted checkouts, or audit findings. However, both of its two action references are unpinned, leaving avoidable build-integrity risk.