webgriffe/payum-lock-request-extension-bundle
Release history is sparse, and no contributors were active in the last three months. The organization-backed repository is current and the package is licensed, which offsets some concern.
60%
Total Score
75
100
88
75
Health Score Breakdown
The package has only 3 releases since October 2023, with a median interval of about 14 months and 1 release in the last 12 months, indicating a slow maintenance cadence.
No commits or active maintainers were recorded in the last three months, which is a meaningful maintenance concern despite the recent release and push.
Composer build tooling is present, but no security scanning tools were detected; this is a minor transparency and hygiene gap.
The repository has no security policy, leaving vulnerability reporting and response expectations undocumented.
The single workflow was fully analyzed, uses read-only permissions, and has no dangerous audit findings. However, all 3 action references are unpinned, which creates a modest reproducibility and update risk.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
 Webgriffe SRL |
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 symfony/http-kernel Version ^7.4 | — | — |
symfony/dependency-injection Version ^7.4 | — | — |
webgriffe/payum-lock-request-extension Version ^0.2 | — | — |
Weekly Downloads
Info
- Last Published
- 7 months ago
- Created
- 2 years ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.