The package includes tests, a README, and a declared GPL license, but these do not offset its abandonment. Its installation scripts also run Composer commands, increasing the need for a maintained replacement.
10%
Total Score
0
40
50
Packagist marks the entire package as abandoned, with no replacement specified. Package-level deprecation is a severe dependency-health warning.
This package has only one release, published on February 1, 2016, and none in the past 12 months. That indicates prolonged abandonment rather than an actively maintained dependency.
The repository recorded zero commits and zero active maintainers over the past three months, confirming that maintenance has stopped.
The linked repository is archived and was last pushed on February 1, 2016, so it is no longer maintained.
The package runs post-autoload-dump, post-install-cmd, and post-update-cmd scripts during Composer operations. These are additional execution points that deserve scrutiny, especially for an abandoned package.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
wp-pay/core Version ^1.3.1 | — | — |
xrstf/composer-php52 Version 1.* | — | — |
wp-pay-gateways/ogone Version ^1.2.5 | — | — |
wp-pay-gateways/common Version ^1.0.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.