zongphp/alipay

Tests, a README, an MIT declaration, and a small runtime dependency set provide useful baseline transparency. The absence of security tooling and policy adds maintenance concern beyond the long inactivity.

Latest 2.0.1

Packagist

38%

Total Score

Maintainer Stability

Dependencies

100

Maturity

Supply Chain

Health Score Breakdown

Release history

The package has had only two releases, with the latest published in January 2018 and none in the past 12 months. This strongly raises abandonment and compatibility risk.

Repo commit activity

The repository recorded zero commits and zero active maintainers in the past three months, consistent with the package having been inactive for over eight years.

Project backing

The registry namespace and repository owner are the same individual account, providing consistent ownership context but no organizational backing.

Repo popularity

The repository has zero stars and forks and only one watcher. Popularity is supporting evidence rather than a verdict, but this provides little evidence of a broad support base.

Repo tooling

Composer is used for builds, but no security scanning tools are present. That is a meaningful hygiene gap for a payment integration, though it does not by itself show abandonment.