Package Health/thelia/transfer-payment-module

thelia/transfer-payment-module

Usable with caveats: it is actively released, licensed, non-deprecated, and backed by an organization, but all recent commits come from one contributor and the repository does not identify this package in its README. The missing security policy and workflow permission declaration add transparency concerns.

Latest 3.0.1

Packagist

65%

Total Score

Maintainer Stability

Dependencies

100

Maturity

Supply Chain

Health Score Breakdown

Repo bus factor

One contributor made all 5 commits in the last 3 months, creating a real continuity risk. Organization ownership provides some handoff capacity, but no second active contributor is shown.

Repo package mention

The repository name does not match the package name and its README does not mention the package, so the linkage is not transparent and the package may be attached to a repository that does not clearly identify it.

Repo popularity

The repository has 9 forks and 3 watchers but no stars, indicating limited visible adoption. This is supporting evidence only and does not outweigh the current releases and organizational backing.

Repo tooling

Composer build tooling is present, but no security scanning tools were detected. The missing scanning is a modest transparency gap rather than evidence that the package is unsafe.

Security policy

The repository has no SECURITY.md or other security policy, leaving vulnerability reporting and response expectations unclear.