tiderjian/qs-pay

The MIT license, matching repository, README, and lack of install scripts provide basic transparency for consumers. Its payment integration also depends on five runtime packages, increasing maintenance exposure.

Latest v0.2.1

Packagist

38%

Total Score

Maintainer Stability

Dependencies

Maturity

Supply Chain

Health Score Breakdown

Release history

The latest release was about 6 years ago, with no releases in the last 12 months. That prolonged release silence is strong evidence of abandonment risk.

Repo commit activity

There were no commits and no active maintainers in the last 3 months, consistent with a project that has seen no recent maintenance. The non-archived status does not compensate for the lack of activity.

Dependency profile

The package declares five runtime dependencies, including several payment and framework integrations. That creates meaningful exposure to dependency compatibility and maintenance changes in an already stale package.

Repo issue activity

There are no open issues or pull requests, and no recent activity. This is mildly reassuring for backlog size but also provides no evidence of ongoing project engagement.

Repo popularity

The repository has only 2 stars, 1 fork, and 1 watcher. Popularity is not decisive, but this thin adoption signal provides little evidence of a broad support base.

Vulnerabilities

We didn't find any vulnerabilities for this package.

Package versions

Maintainers

tiderjian

Direct Dependencies

Dependency	Last Release	Score
overtrue/wechat Version ~4.0	—	—
zhangv/union-pay Version ^0.8.13	—	—
tiderjian/think-core Version *	—	—
zoujingli/wechat-developer Version ^1.2	—	—
mobiledetect/mobiledetectlib Version ^2.8	—	—