yii-cms/yii2-robokassa

The repository includes tests, a clear README, a license, and a simple Composer dependency profile. The project is not archived, but its maintenance and workflow hygiene warrant checking before adoption.

Latest 1.3.1

Packagist

58%

Total Score

Maintainer Stability

Dependencies

100

Maturity

Supply Chain

Health Score Breakdown

Release history

The latest release was published about 6 years and 8 months ago, with no releases in the last 12 months. This materially raises abandonment and compatibility risk despite the package's established history of 8 releases.

Repo commit activity

There were no commits and no active maintainers in the last 3 months. Combined with the old latest release, this indicates weak current maintenance activity.

Repo tooling

The project uses Composer, but no security-scanning tools were detected. This is a modest transparency and maintenance-process gap, not evidence of unsafe code.

Security policy

No repository security policy was found. For a payment-processing extension, the absence of documented vulnerability-reporting guidance is a meaningful transparency gap.

Workflow audit

The single workflow was fully analyzed with no dangerous triggers, sinks, or audit findings. However, all 5 action references are unpinned, leaving avoidable build reproducibility and action-update risk.