Package Health/team-kotik/laravel-sberbank-acquiring

team-kotik/laravel-sberbank-acquiring

Usable with caveats: the package is licensed, documented, tested, and not deprecated or archived. However, it has had no release or repository activity for over two years, with no security scanning, so ongoing maintenance should not be assumed.

Latest 1.0.2

Packagist

58%

Total Score

Maintainer Stability

Maturity

Supply Chain

Health Score Breakdown

Lifecycle scripts

The package defines post-install and post-update scripts, which add installation-time behavior that dependents must accept. This is a modest supply-chain exposure, not evidence that the scripts are dangerous.

Release history

Only three releases were published, all within roughly 9 hours in January 2024, with no releases in the last 12 months; the latest release is now more than two years old. This is a meaningful maintenance concern, though it does not by itself show abandonment.

Repo commit activity

The repository recorded zero commits and zero active maintainers in the last three months, consistent with the long gap since the latest release. This lowers confidence in timely fixes and ongoing compatibility maintenance.

Repo tooling

Composer build tooling is present, but no security scanning tools are configured. For a package handling payment integrations, the missing security automation is a transparency and maintenance gap.

Security policy

No repository security policy was found. This makes vulnerability reporting and response expectations less clear, especially for a payment-related package.