Package Health

vrpayment/plugin-core

The repository lacks a security policy and automated security scanning. Strong documentation, tests, and release notes provide useful transparency for adopters.

Latest 0.2.7PackagistPackagist

70%

Total Score

Maintainer Stability
Maintainer Stability
Assesses the consistency and reliability of package maintainers

67

Dependencies
Dependencies
Evaluates the health and security of package dependencies

100

Maturity
Maturity
Indicates package age, release frequency, and adoption metrics

88

Supply Chain
Supply Chain
Evaluates supply chain security practices and risks

83

Health Score Breakdown

Repo bus factorcaution

One contributor made all five recent commits, leaving maintenance highly concentrated; organizational ownership offers some handoff capacity but does not remove the continuity risk.

Repo commit activitycaution

Five commits were made in the last three months, demonstrating ongoing work, though the volume is modest for a payment library.

Repo toolingcaution

Composer build tooling is present, but no security-scanning tool was detected, leaving a meaningful verification gap for payment-related code.

Security policycaution

The repository has no security policy, so the process for reporting and handling vulnerabilities is not documented.

Version stabilitycaution

Version 0.2.7 is not a stable major release, so compatibility expectations are lower despite the absence of prereleases in recent releases.

Vulnerabilities

We didn't find any vulnerabilities for this package.

Package versions

Maintainers

No maintainer information available.

Direct Dependencies

DependencyLast ReleaseScore
vrpayment/sdk
Version ^5.0
guzzlehttp/guzzle
Version ^7.10

Weekly Downloads

Info

Last Published
23 days ago
Created
7 months ago

Are You Affected?

Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.

Free. No credit card required.

Aikido Platform