smart2pay/sdk-php

The repository is backed by an organization, has a clear MIT license, and publishes release notes. It has no security policy or automated security scanning, and its small user base offers little independent reassurance.

Latest 4.0.0

Packagist

66%

Total Score

Maintainer Stability

Dependencies

100

Maturity

Supply Chain

Health Score Breakdown

Release history

The package has existed since 2018 with 41 releases, but only one release in the last 12 months. This indicates a mature project with a currently slow release cadence.

Repo commit activity

There were zero commits and zero active maintainers in the last three months, despite the release being assessed several months after its April 1, 2026 publication. This is the main maintenance concern.

Repo popularity

The repository has only 5 stars and 3 forks. Popularity is supporting evidence rather than a verdict, but this provides little independent evidence of broad adoption.

Repo tooling

The repository uses Composer, but no security scanning tools were detected. The missing scanning is a modest transparency and maintenance gap, not a severe risk by itself.

Security policy

The repository has no security policy. For a payment SDK this weakens the documented path for reporting and handling vulnerabilities.