vitepay/alipay

Release historydanger

The package has only one release, published over six years ago, with no releases in the last 12 months. That is strong evidence of abandonment for a payment integration that may need ongoing compatibility updates.

Repo commit activitydanger

The repository recorded zero commits and zero active maintainers in the last three months; its last push was in November 2020. This confirms that the long release gap reflects inactive development rather than registry-only inactivity.

Dependency profilecaution

The package declares eight runtime dependencies, including a framework, HTTP adapter, money library, and the vitepay core package. That creates a relatively broad compatibility surface for a small integration and increases maintenance exposure.

Security policycaution

The repository has no security policy, leaving no documented channel or process for reporting vulnerabilities. This is a meaningful transparency gap for payment-handling code, though it does not independently make the release unfit.