tecsin/yii2-voguepay

Release historydanger

The latest registry release was about 8 years ago, with no releases in the last 12 months and only three releases overall. This is strong evidence of abandonment risk, although the package is not registry-deprecated.

Repo commit activitydanger

There were no commits and no active maintainers in the last 3 months, consistent with the package's long release gap. This materially increases the risk that defects or compatibility issues will remain unresolved.

Maintainerscaution

Only one account has registry publishing access, leaving limited visible publishing capacity. The linked repository is user-owned rather than organization-backed, so there is no provided evidence of a broader support team.

Repo popularitycaution

The repository has only 2 stars, 2 forks, and 1 watcher. Popularity is supporting evidence rather than a verdict, but these low figures provide little evidence of a strong user or contributor community.

Repo toolingcaution

Composer build tooling is present, but no security scanning tools are configured. That is a hygiene gap for a payment-related extension, though it is not evidence that the package is unsafe.