unaspbr/iugu-php

The README, release notes, and small dependency set make integration straightforward. Maintenance has effectively stopped, and the project lacks security-policy and scanning coverage, so long-term support is a substantial concern.

Latest 0.1.4

Packagist

42%

Total Score

Maintainer Stability

Dependencies

100

Maturity

Supply Chain

Health Score Breakdown

Release history

The package has had no release in more than six years: its latest release was August 25, 2020, despite six releases overall. That long release gap is strong evidence of abandonment risk.

Repo commit activity

The repository recorded zero commits and zero active maintainers in the last three months, consistent with the package's long release hiatus. The non-archived status does not compensate for the absence of recent work.

Maintainers

Only one account has publish access, leaving the package dependent on a very small publishing base. The linked repository is user-owned rather than organization-owned, so there is no provided backing signal to offset this concentration.

Repo tooling

Composer is used for the build, which is appropriate, but no security-scanning tools are reported. That is a hygiene gap that matters for a payment API client, although it is less significant than the lack of maintenance.

Security policy

The repository has no security policy, leaving vulnerability-reporting expectations and response ownership unclear. This adds transparency and maintenance risk, though it does not by itself show an unsafe release.