smith/ultimate-kopokopo

It includes tests, release notes, a clear MIT license, and only one runtime dependency. The repository has no security policy or automated security scanning, so future issues may be harder to detect.

Latest 1.0

Packagist

42%

Total Score

Maintainer Stability

Dependencies

100

Maturity

Supply Chain

Health Score Breakdown

Release history

This package has made only one release, nearly five years ago, with no releases in the last 12 months. That is strong evidence of abandonment for an API SDK.

Repo commit activity

The repository recorded zero commits and zero active maintainers in the last three months, consistent with the long period since its only release. No newer maintenance is visible to offset that risk.

Repo popularity

The repository has 2 stars, 1 fork, and 1 watcher, indicating a very small adoption footprint. Popularity is supporting evidence rather than a verdict, but there is little community activity to compensate for inactivity.

Repo tooling

Composer build tooling is present, but no security scanning tools are configured. That is a maintenance and transparency gap, though it does not by itself make the package unfit.

Security policy

The repository has no security policy, leaving users without a documented channel or process for reporting vulnerabilities. This matters for an SDK that handles payment API integrations.