Package Health

val-mygento/yandex-checkout-sdk-php

It has a clear README, tests, changelog, MIT license, and a focused dependency set. Pin 1.6.9 only if replacing the payment client would be difficult, because future fixes are uncertain.

Latest 1.6.9PackagistPackagist

45%

Total Score

Maintainer Stability
Maintainer Stability
Assesses the consistency and reliability of package maintainers

25

Dependencies
Dependencies
Evaluates the health and security of package dependencies

100

Maturity
Maturity
Indicates package age, release frequency, and adoption metrics

78

Supply Chain
Supply Chain
Evaluates supply chain security practices and risks

88

Health Score Breakdown

Release historydanger

The package has had only one release, with no releases in the last four years. That is strong evidence of a dormant release line and outweighs the otherwise complete package documentation.

Repo commit activitydanger

The repository recorded zero commits and zero active maintainers in the last three months, with its last push in May 2022. This indicates no current maintenance capacity.

Project backingcaution

The repository is owned by an individual account matching the registry namespace, providing ownership consistency but no organizational backing to compensate for the thin maintenance record.

Repo popularitycaution

The repository has one star and no forks, showing very limited public adoption. Popularity is supporting evidence rather than a verdict, but it provides little resilience against abandonment.

Repo toolingcaution

Composer build tooling is present, but no security scanning tools were detected. The missing scanning is a minor hygiene gap and is secondary to the maintenance evidence.

Vulnerabilities

We didn't find any vulnerabilities for this package.

Package versions

Maintainers

No maintainer information available.

Direct Dependencies

DependencyLast ReleaseScore
psr/log
Version ^1.0

Weekly Downloads

Info

Last Published
4 years ago
Created
4 years ago

Are You Affected?

Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.

Free. No credit card required.

Aikido Platform