Public recordExcellent
Software health reportschema 0.31.0 · metrics 2.5.0 · 2026-08-05 09:23 UTC
mollie / mollie-api-php
Mollie API client for PHP
mollie/mollie-api-php holds a health index of 89 out of 100, placing it in the Excellent band. It scores highest on Vitality (88/100) and lowest on Security (50/100). It was last updated today. 2 contributors account for most of its recent work.
89
overall / 100Software health index
Metrics are grouped into weighted categories on one standardized 1–100 scale. Overall starts as their weighted mean, calibrated against the distribution of the public record so bands carry percentile meaning; when public evidence triggers the High-Risk Jurisdiction Policy, the rating is adjusted and receives an At Risk ceiling of 34.
89
Exceptional93-100The record's top tier (≈ top 5%); essentially all checked criteria met
Excellent80-92Strong across the board; minor gaps
Good65-79Healthy; gaps are limited and manageable
Moderate50-64Acceptable with notable gaps; review recommended
Weak35-49Material weaknesses across several areas
At Risk20-34Significant weaknesses; adoption warrants caution
Critical1-19Severe problems (abandoned, single-maintainer, no hygiene)
Score profile
Each axis is a category. The shape matters more than the average — a healthy subject fills the whole shape, while a spike-and-crater profile means strength in one dimension is masking risk in another.
The weighted overall 75 is calibrated to 89 on the published index scale (record calibration 2026-08-02).
Ownership
MollieOrganization
194 followers86 public repossince Jan 2012
This repository is backed by an organization — shared, accountable stewardship that can outlive any single maintainer.
Package ecosystems
| Registry | Package | Version | Downloads / mo | Versions | Last publish | Tags |
|---|---|---|---|---|---|---|
| Packagist | mollie/mollie-api-php | v3.13.1 | 566,919 | 236 | 57 days ago | apipaymentpaymentsservicegatewaypaypalidealmolliepaysafecardseparecurringsubscriptionscreditcardsofortdirect-debitmistercashklarnabancontactsofortbankingchargescbcbanktransferbelfiusbelfius-direct-netrefundsprzelewy24podiumcadeaukaartkbcapple-paygift-cardsintersolvefashionchequeinghomepaypaylatersliceit |
Metrics by category
Vitality
Is the project alive — is code being written and are releases shipping?
88
Development activity
86Excellent
How it's scored
| 36/36 | Push recency — last push 0 days ago |
| 22.2/36 | Commit cadence — 32/52 weeks with commits |
| 18/18 | Commit volume — 271 commits in the last year |
| 10/10 | OpenSSF Scorecard: Maintained — 30 commit(s) and 1 issue activity found in the last 90 days -- score normalized to 10 |
Inputs used
| commits_last_year | 271 |
| human_commit_share | 1 |
| days_since_last_push | 0 |
| active_weeks_last_year | 32 |
Release discipline
90Excellent
How it's scored
| 27/27 | Ships releases — 100 releases published |
| 36/36 | Release recency — latest release 57 days ago |
| 27/27 | Release cadence — a release every ~24.8 days |
| 0/10 | OpenSSF Scorecard: Signed-Releases — Project has not signed or included provenance with any releases. |
Inputs used
| releases_count | 100 |
| latest_release_tag | v3.13.1 |
| releases_from_tags | no |
| days_since_latest_release | 57 |
| mean_days_between_releases | 24.8 |
Community & Adoption
Does the project have users, downloads, attention, and a welcoming setup for contributors?
72
Popularity & adoption
74Good
How it's scored
| 45.1/60 | Stars — 602 stars |
| 19.1/25 | Forks — 199 forks |
| 9.9/15 | Watchers — 61 watchers |
Inputs used
| forks | 199 |
| stars | 602 |
| watchers | 61 |
| growth_state | unverified |
| growth_factor_pct | 100 |
| growth_unverified_reason | no_history |
Community health
58Moderate
How it's scored
| 22.5/22.5 | README |
| 22.5/22.5 | License — recognized license (BSD-2-Clause) |
| 0/18 | CONTRIBUTING guide |
| 0/13.5 | Code of conduct |
| 7.2/7.2 | Issue template |
| 0/6.3 | PR template |
Inputs used
| has_readme | yes |
| has_license | yes |
| readme_badges | 4 |
| has_contributing | no |
| has_issue_template | yes |
| has_code_of_conduct | no |
| readme_badge_services | github.com, poser.pugx.org, shields.io |
| has_pull_request_template | no |
Ecosystem adoption (downloads)
89Excellent
How it's scored
| 76.7/80 | Monthly downloads — 566,919 downloads/month across packagist |
| 12.2/20 | Registry dependents — 67 packages depend on it |
Inputs used
| packages | mollie/mollie-api-php |
| dependents | 67 |
| ecosystems | packagist |
| total_downloads | 16,681,513 |
| monthly_downloads | 566,919 |
Sustainability & Governance
Will the project survive its people — bus factor, responsiveness, who backs it, and package upkeep?
79
Maintainer resilience (bus factor)
62Moderate
How it's scored
| 25.2/54 | Bus factor — 2 contributor(s) cover half of all commits |
| 13.8/22.5 | Commit distribution — top contributor authored 39% of commits |
| 13.5/13.5 | Contributor breadth — 94 contributors |
| 10/10 | OpenSSF Scorecard: Contributors — project has 14 contributing companies or organizations |
Inputs used
| bus_factor | 2 |
| contributors_sampled | 94 |
| top_contributor_share | 0.388 |
Issue & PR responsiveness
89Excellent
How it's scored
| 41.8/42 | Issue resolution — 100% of issues closed |
| 26.8/30 | PR acceptance — 443/495 decided PRs merged |
| 0/13 | Newcomer PR acceptance — no first-time contributor's PR decided in 30d |
| 9/15 | OpenSSF Scorecard: Code-Review — Found 7/11 approved changesets -- score normalized to 6 |
Inputs used
| merged_prs | 443 |
| open_issues | 2 |
| closed_issues | 396 |
| prs_merged_7d | 1 |
| prs_decided_7d | 1 |
| prs_merged_30d | 1 |
| prs_decided_30d | 1 |
| issue_closed_ratio | 0.995 |
| closed_unmerged_prs | 52 |
| first_time_authors_30d | 0 |
| first_time_prs_merged_30d | 0 |
| first_time_prs_decided_30d | 0 |
Excluded from scoring (no data or not applicable): newcomer_pr_acceptance. Remaining weights renormalized.
Ownership & stewardship
72Good
How it's scored
| 30/30 | Ownership backing — organization-owned |
| 0/20 | Verified domain |
| 16.5/25 | Owner reach — 194 followers of mollie |
| 25/25 | Track record — 86 public repos, account ~14 yr old |
Inputs used
| followers | 194 |
| owner_type | Organization |
| is_verified | — |
| owner_login | mollie |
| public_repos | 86 |
| account_age_days | 5,318 |
Package maintenance
100Exceptional
How it's scored
| 25/25 | Published & resolvable — 1 package(s) on packagist |
| 35/35 | Publish recency — latest publish 57 days ago |
| 20/20 | Version history — 236 published versions |
| 20/20 | Not deprecated — active, not deprecated or yanked |
Inputs used
| packages | mollie/mollie-api-php |
| ecosystems | packagist |
| any_deprecated | no |
| min_days_since_publish | 57 |
Engineering Quality
Are baseline engineering and documentation practices in place?
82
Engineering practices
84Excellent
How it's scored
| 24/24 | CI workflows — 5 workflow(s) |
| 24/24 | Tests present |
| 16/16 | Linter config — .php-cs-fixer.dist.php, phpstan.neon |
| 0/9.6 | Pre-commit hooks |
| 0/6.4 | .editorconfig |
| 20/20 | OpenSSF Scorecard: CI-Tests — 10 out of 10 merged PRs checked by a CI test -- score normalized to 10 |
Inputs used
| has_ci | yes |
| has_tests | yes |
| has_editorconfig | no |
| has_linter_config | yes |
| has_precommit_config | no |
Documentation
80Excellent
How it's scored
| 30/30 | README |
| 25/25 | Documentation directory |
| 15/15 | Documentation / homepage site — http://www.mollie.com |
| 10/10 | Repository description |
| 0/10 | Topics |
| 0/10 | Wiki |
Inputs used
| topics | — |
| has_wiki | no |
| homepage | http://www.mollie.com |
| has_readme | yes |
| has_docs_dir | yes |
| has_description | yes |
Security
Are visible security and supply-chain practices strong, without unresolved high-risk jurisdiction exposure?
50
Security posture
50Moderate
How it's scored
| 7.5/7.5 | Binary-Artifacts — no binaries found in the repo |
| 0/7.5 | Branch-Protection — branch protection not enabled on development/release branches |
| 2.5/2.5 | CI-Tests — 10 out of 10 merged PRs checked by a CI test -- score normalized to 10 |
| 0/2.5 | CII-Best-Practices — no effort to earn an OpenSSF best practices badge detected |
| 4.5/7.5 | Code-Review — Found 7/11 approved changesets -- score normalized to 6 |
| 2.5/2.5 | Contributors — project has 14 contributing companies or organizations |
| 0/10 | Dangerous-Workflow — no data |
| 0/7.5 | Dependency-Update-Tool — no update tool detected |
| 0/5 | Fuzzing — project is not fuzzed |
| 2.5/2.5 | License — license file detected |
| 7.5/7.5 | Maintained — 30 commit(s) and 1 issue activity found in the last 90 days -- score normalized to 10 |
| 0/5 | Packaging — no data |
| 0/5 | Pinned-Dependencies — no data |
| 0/5 | SAST — SAST tool is not run on all commits -- score normalized to 0 |
| 4.5/5 | Security-Policy — security policy file detected |
| 0/7.5 | Signed-Releases — Project has not signed or included provenance with any releases. |
| 0/7.5 | Token-Permissions — no data |
| 7.5/7.5 | Vulnerabilities — 0 existing vulnerabilities detected |
Inputs used
| source | openssf_scorecard |
| checks_evaluated | 14 |
| scorecard_version | v5.5.0 |
| checks_inconclusive | 4 |
| scorecard_aggregate | 5 |
Excluded from scoring (no data or not applicable): dangerous_workflow, packaging, pinned_dependencies, token_permissions. Remaining weights renormalized.
AI Readiness
How well is the repo equipped to be developed and maintained with AI coding agents? Carries a deliberately small weight (4%): agent tooling is a real maintenance signal, but a repository with none can still reach 100/100.
59
Agent context & guidance
84Excellent
How it's scored
| 45/45 | Agent instructions — CLAUDE.md |
| 0/15 | Machine-readable docs (llms.txt) |
| 39.5/40 | Legible commit history — 74 of 100 human commits state their intent (structured subject or explanatory body) |
Inputs used
| has_llms_txt | no |
| legible_history_share | 0.74 |
| agent_instruction_files | CLAUDE.md |
| agent_instruction_max_bytes | 3,757 |
How it's scored
| 0/18 | One-command bootstrap |
| 22/22 | Automated tests |
| 11/11 | Lint / format config — .php-cs-fixer.dist.php, phpstan.neon |
| 0/11 | Static type checking |
| 0/10 | Reproducible environment |
| 10/10 | Demonstrated agent practice — 35 of the last 100 commits agent-authored or agent-credited |
| 0/8 | Automated maintenance — no automated dependency updates observed |
| 0/10 | OpenSSF Scorecard: Pinned-Dependencies — no data |
Inputs used
| has_nix | no |
| has_tests | yes |
| lockfiles | — |
| has_dockerfile | no |
| typed_language | no |
| bootstrap_files | — |
| has_devcontainer | no |
| has_linter_config | yes |
| typecheck_configs | — |
| agent_commit_share | 0.35 |
| toolchain_manifests | — |
| dependency_bot_commit_share | 0 |
Excluded from scoring (no data or not applicable): OpenSSF Scorecard: Pinned-Dependencies. Remaining weights renormalized.
Code legibility for models
55Moderate
How it's scored
| 0/45 | Type-checkable code — PHP without a type-check config |
| 55/55 | Manageable file sizes — 0/786 source files over 60KB |
Inputs used
| primary_language | PHP |
| largest_source_bytes | 19,152 |
| source_files_sampled | 786 |
| oversized_source_files | 0 |
How it's scored
| 0/40 | API schema (OpenAPI/GraphQL/proto) |
| 0/20 | MCP server |
| 40/40 | Runnable examples — recipes |
Inputs used
| example_dirs | recipes |
| has_mcp_signal | no |
| api_schema_files | — |
Key facts
602GitHub stars
94contributors
271commits, last 12 months
0days since last push
100releases
2bus factor
2open issues
Packagistpackage ecosystems
Data collection warnings
- Star history unavailable: GitHub GraphQL error: Resource not accessible by personal access token
- No resolved dependencies carried a version and a supported ecosystem
More detail
Star and fork history 0 ★ / 199 ⇿
0Stars
199Forks
98Releases
When each star and fork was added, collected from GitHub and bucketed by day. Cumulative growth sits directly above the daily additions it is made of, so the two read against each other: steady organic accretion looks nothing like an abrupt, short-lived burst. Where that difference is measurable, it is reported as growth authenticity.
Major 1Minor 55Patch 29
Each point covers 12 days.
OpenSSF Scorecard 5.0 / 10
5.0aggregate
Independent, tool-agnostic security assessment from the open-source OpenSSF Scorecard. Each check rewards a security practice, not a specific vendor's tool. Checks Scorecard could not determine are marked n/a and excluded from the security score (never counted as zero).
| 10 | Binary-Artifacts | no binaries found in the repo |
| 0 | Branch-Protection | branch protection not enabled on development/release branches |
| 10 | CI-Tests | 10 out of 10 merged PRs checked by a CI test -- score normalized to 10 |
| 0 | CII-Best-Practices | no effort to earn an OpenSSF best practices badge detected |
| 6 | Code-Review | Found 7/11 approved changesets -- score normalized to 6 |
| 10 | Contributors | project has 14 contributing companies or organizations |
| n/a | Dangerous-Workflow | no workflows found |
| 0 | Dependency-Update-Tool | no update tool detected |
| 0 | Fuzzing | project is not fuzzed |
| 10 | License | license file detected |
| 10 | Maintained | 30 commit(s) and 1 issue activity found in the last 90 days -- score normalized to 10 |
| n/a | Packaging | packaging workflow not detected |
| n/a | Pinned-Dependencies | no dependencies found |
| 0 | SAST | SAST tool is not run on all commits -- score normalized to 0 |
| 9 | Security-Policy | security policy file detected |
| 0 | Signed-Releases | Project has not signed or included provenance with any releases. |
| n/a | Token-Permissions | No tokens found |
| 10 | Vulnerabilities | 0 existing vulnerabilities detected |
Direct dependencies 4
| Registry | Package | Version constraint | Manifest |
|---|---|---|---|
| Packagist | nyholm/psr7 | ^1.8 | composer.json |
| Packagist | psr/http-client | ^1.0 | composer.json |
| Packagist | psr/http-factory | ^1.1 | composer.json |
| Packagist | psr/http-message | ^1.1|^2.0 | composer.json |
All dependencies 14
Full resolved dependency set from the GitHub dependency graph: 4 direct and 10 indirect (transitive) packages. The transitive closure is complete when the repository commits a lockfile.
| Registry | Package | Version | Relation |
|---|---|---|---|
| Packagist | nyholm/psr7 | — | direct |
| Packagist | psr/http-client | — | direct |
| Packagist | psr/http-factory | — | direct |
| Packagist | psr/http-message | — | direct |
| Packagist | brianium/paratest | — | indirect |
| Packagist | composer/ca-bundle | — | indirect |
| Packagist | ext-curl | — | indirect |
| Packagist | ext-json | — | indirect |
| Packagist | ext-openssl | — | indirect |
| Packagist | guzzlehttp/guzzle | — | indirect |
| Packagist | php | — | indirect |
| Packagist | phpstan/phpstan | — | indirect |
| Packagist | phpunit/phpunit | — | indirect |
| Packagist | symfony/var-dumper | — | indirect |
Dependency advisories not assessed
Advisory matching could not run for this report: No resolved dependencies carried a version and a supported ecosystem
Raw JSON report machine-readable
{
"data": {
"icon": {
"bytes": 5564,
"width": 240,
"height": 240,
"rejected": [],
"collected": true,
"media_type": "image/png",
"source_url": "https://github.com/mollie/mollie-api-php/assets/7265703/140510a5-ede5-41bf-9d77-0d09b906e8f4",
"source_type": "readme",
"content_hash": "daa61fce619c7c1339106e8c70ae49e450ce68db0b18f45b19a02242da51c19e",
"candidates_considered": 1
},
"repo": {
"topics": [],
"is_fork": false,
"size_kb": 4830,
"has_wiki": false,
"homepage": "http://www.mollie.com",
"languages": {
"PHP": 1297768,
"Shell": 4969
},
"pushed_at": "2026-08-05T08:05:35Z",
"created_at": "2013-12-02T11:58:56Z",
"owner_type": "Organization",
"updated_at": "2026-08-05T08:06:39Z",
"description": "Mollie API client for PHP",
"is_archived": false,
"is_disabled": false,
"license_spdx": "BSD-2-Clause",
"default_branch": "main",
"license_spdx_raw": "BSD-2-Clause",
"primary_language": "PHP",
"significant_languages": [
"PHP"
]
},
"owner": {
"blog": "https://www.mollie.com",
"name": "Mollie",
"type": "Organization",
"login": "mollie",
"company": null,
"location": "Amsterdam, Netherlands",
"followers": 194,
"avatar_url": "https://avatars.githubusercontent.com/u/1327170?v=4",
"created_at": "2012-01-13T08:40:24Z",
"is_verified": null,
"public_repos": 86,
"account_age_days": 5318
},
"license": {
"state": "standard",
"spdx_id": "BSD-2-Clause",
"raw_spdx": "BSD-2-Clause",
"file_present": true,
"scorecard_found": true,
"profile_has_license": true
},
"activity": {
"releases": [
{
"tag": "v3.13.1",
"kind": "patch",
"published_at": "2026-06-08T09:26:38Z"
},
{
"tag": "v3.13.0",
"kind": "minor",
"published_at": "2026-06-01T12:11:03Z"
},
{
"tag": "v3.12.0",
"kind": "minor",
"published_at": "2026-05-19T07:32:30Z"
},
{
"tag": "v3.11.0",
"kind": "minor",
"published_at": "2026-05-06T16:16:01Z"
},
{
"tag": "v3.10.0",
"kind": "minor",
"published_at": "2026-04-15T10:57:02Z"
},
{
"tag": "v3.9.0",
"kind": "minor",
"published_at": "2026-02-09T08:55:17Z"
},
{
"tag": "v3.8.0",
"kind": "minor",
"published_at": "2026-01-06T18:53:32Z"
},
{
"tag": "v3.7.0",
"kind": "minor",
"published_at": "2025-12-01T09:03:39Z"
},
{
"tag": "v3.6.0",
"kind": "minor",
"published_at": "2025-11-05T15:05:08Z"
},
{
"tag": "v3.5.0",
"kind": "minor",
"published_at": "2025-10-28T10:41:27Z"
},
{
"tag": "v3.4.0",
"kind": "minor",
"published_at": "2025-08-13T12:23:37Z"
},
{
"tag": "v3.3.3",
"kind": "patch",
"published_at": "2025-08-12T11:03:20Z"
},
{
"tag": "v3.3.2",
"kind": "patch",
"published_at": "2025-07-25T09:44:06Z"
},
{
"tag": "v3.3.1",
"kind": "patch",
"published_at": "2025-07-25T09:15:29Z"
},
{
"tag": "v3.3.0",
"kind": "minor",
"published_at": "2025-07-25T08:51:40Z"
},
{
"tag": "v3.2.0",
"kind": "minor",
"published_at": "2025-07-23T13:07:15Z"
},
{
"tag": "v3.1.5",
"kind": "patch",
"published_at": "2025-07-10T14:32:57Z"
},
{
"tag": "v3.1.4",
"kind": "patch",
"published_at": "2025-06-11T13:14:35Z"
},
{
"tag": "v3.1.3",
"kind": "patch",
"published_at": "2025-06-11T11:31:51Z"
},
{
"tag": "v3.1.2",
"kind": "patch",
"published_at": "2025-06-10T09:53:14Z"
},
{
"tag": "v3.1.1",
"kind": "patch",
"published_at": "2025-06-10T09:47:39Z"
},
{
"tag": "v3.1.0",
"kind": "minor",
"published_at": "2025-06-05T10:22:25Z"
},
{
"tag": "v3.0.6",
"kind": "patch",
"published_at": "2025-06-02T12:38:29Z"
},
{
"tag": "v2.79.1",
"kind": "patch",
"published_at": "2025-05-06T10:55:51Z"
},
{
"tag": "v3.0.5",
"kind": "patch",
"published_at": "2025-04-27T13:22:20Z"
},
{
"tag": "v3.0.4",
"kind": "patch",
"published_at": "2025-04-25T09:52:36Z"
},
{
"tag": "v3.0.3",
"kind": "patch",
"published_at": "2025-04-23T11:39:19Z"
},
{
"tag": "v3.0.2",
"kind": "patch",
"published_at": "2025-04-17T11:04:37Z"
},
{
"tag": "v3.0.1",
"kind": "patch",
"published_at": "2025-04-15T12:01:59Z"
},
{
"tag": "v3.0.0",
"kind": "major",
"published_at": "2025-04-14T11:52:26Z"
},
{
"tag": "v3.0.0-beta.11",
"kind": "prerelease",
"published_at": "2025-03-31T11:18:23Z"
},
{
"tag": "v3.0.0-beta.10",
"kind": "prerelease",
"published_at": "2025-03-27T15:12:50Z"
},
{
"tag": "v3.0.0-beta.9",
"kind": "prerelease",
"published_at": "2025-03-24T14:11:39Z"
},
{
"tag": "v3.0.0-beta.8",
"kind": "prerelease",
"published_at": "2025-03-21T15:56:44Z"
},
{
"tag": "v3.0.0-beta.6",
"kind": "prerelease",
"published_at": "2025-03-19T20:41:59Z"
},
{
"tag": "v3.0.0-beta.5",
"kind": "prerelease",
"published_at": "2025-03-18T09:33:16Z"
},
{
"tag": "v3.0.0-beta.4",
"kind": "prerelease",
"published_at": "2025-03-13T15:03:02Z"
},
{
"tag": "v3.0.0-beta.3",
"kind": "prerelease",
"published_at": "2025-03-13T13:32:37Z"
},
{
"tag": "v3.0.0-beta.2",
"kind": "prerelease",
"published_at": "2025-03-11T09:57:56Z"
},
{
"tag": "v3.0.0-beta.7",
"kind": "prerelease",
"published_at": "2025-03-20T21:58:32Z"
},
{
"tag": "v2.79.0",
"kind": "minor",
"published_at": "2025-03-11T09:52:15Z"
},
{
"tag": "v3.0.0-beta.1",
"kind": "prerelease",
"published_at": "2025-03-03T09:03:18Z"
},
{
"tag": "v2.78.0",
"kind": "minor",
"published_at": "2025-02-13T12:28:16Z"
},
{
"tag": "v2.77.0",
"kind": "minor",
"published_at": "2025-02-11T23:53:39Z"
},
{
"tag": "v2.76.1",
"kind": "patch",
"published_at": "2025-01-24T15:00:41Z"
},
{
"tag": "v2.76.0",
"kind": "minor",
"published_at": "2024-12-18T12:41:54Z"
},
{
"tag": "v2.75.0",
"kind": "minor",
"published_at": "2024-11-21T10:33:37Z"
},
{
"tag": "v2.74.1",
"kind": "patch",
"published_at": "2024-10-30T10:30:41Z"
},
{
"tag": "v2.74.0",
"kind": "minor",
"published_at": "2024-10-30T10:01:19Z"
},
{
"tag": "v2.73.0",
"kind": "minor",
"published_at": "2024-09-30T13:18:43Z"
},
{
"tag": "v2.72.0",
"kind": "minor",
"published_at": "2024-09-11T15:09:20Z"
},
{
"tag": "v2.71.0",
"kind": "minor",
"published_at": "2024-07-17T08:04:10Z"
},
{
"tag": "v2.70.0",
"kind": "minor",
"published_at": "2024-07-03T19:13:21Z"
},
{
"tag": "v2.69.0",
"kind": "minor",
"published_at": "2024-06-24T11:53:02Z"
},
{
"tag": "v2.68.0",
"kind": "minor",
"published_at": "2024-06-10T09:52:08Z"
},
{
"tag": "v2.67.1",
"kind": "patch",
"published_at": "2024-05-07T07:59:47Z"
},
{
"tag": "v2.67.0",
"kind": "minor",
"published_at": "2024-04-12T07:07:18Z"
},
{
"tag": "v2.66.0",
"kind": "minor",
"published_at": "2024-03-19T13:35:59Z"
},
{
"tag": "v2.65.0",
"kind": "minor",
"published_at": "2024-01-23T12:40:32Z"
},
{
"tag": "v2.64.0",
"kind": "minor",
"published_at": "2023-12-19T16:08:29Z"
},
{
"tag": "v2.63.0",
"kind": "minor",
"published_at": "2023-11-06T09:31:33Z"
},
{
"tag": "v2.62.0",
"kind": "minor",
"published_at": "2023-10-23T11:23:29Z"
},
{
"tag": "v2.61.0",
"kind": "minor",
"published_at": "2023-07-31T15:41:17Z"
},
{
"tag": "v2.60.0",
"kind": "minor",
"published_at": "2023-07-30T21:19:14Z"
},
{
"tag": "v2.59.0",
"kind": "minor",
"published_at": "2023-07-18T13:44:16Z"
},
{
"tag": "v2.58.0",
"kind": "minor",
"published_at": "2023-07-11T12:05:27Z"
},
{
"tag": "v2.58.0-beta",
"kind": "prerelease",
"published_at": "2023-06-23T09:13:31Z"
},
{
"tag": "v2.57.0",
"kind": "minor",
"published_at": "2023-06-23T09:10:10Z"
},
{
"tag": "v2.56.1",
"kind": "patch",
"published_at": "2023-06-19T10:56:57Z"
},
{
"tag": "v2.56.0",
"kind": "minor",
"published_at": "2023-05-30T13:12:46Z"
},
{
"tag": "v2.55.0",
"kind": "minor",
"published_at": "2023-05-09T10:12:03Z"
},
{
"tag": "v2.54.0",
"kind": "minor",
"published_at": "2023-05-04T08:34:06Z"
},
{
"tag": "v2.53.0",
"kind": "minor",
"published_at": "2023-04-19T21:03:11Z"
},
{
"tag": "v2.52.1",
"kind": "patch",
"published_at": "2023-04-05T13:24:56Z"
},
{
"tag": "v2.52.0",
"kind": "minor",
"published_at": "2023-03-20T14:01:04Z"
},
{
"tag": "v2.51.0",
"kind": "minor",
"published_at": "2023-03-13T09:02:32Z"
},
{
"tag": "v2.50.1",
"kind": "patch",
"published_at": "2023-03-10T12:16:44Z"
},
{
"tag": "v2.50.0",
"kind": "minor",
"published_at": "2023-01-02T08:52:26Z"
},
{
"tag": "v2.49.2",
"kind": "patch",
"published_at": "2022-12-29T15:15:09Z"
},
{
"tag": "v2.49.1",
"kind": "patch",
"published_at": "2022-12-20T19:16:13Z"
},
{
"tag": "v2.49.0",
"kind": "minor",
"published_at": "2022-12-13T13:01:21Z"
},
{
"tag": "v2.48.0",
"kind": "minor",
"published_at": "2022-11-03T20:03:02Z"
},
{
"tag": "v2.47.0",
"kind": "minor",
"published_at": "2022-11-03T14:57:35Z"
},
{
"tag": "v2.46.0",
"kind": "minor",
"published_at": "2022-09-01T10:52:23Z"
},
{
"tag": "v2.45.0",
"kind": "minor",
"published_at": "2022-07-11T15:04:20Z"
},
{
"tag": "v2.balances-beta.0",
"kind": "other",
"published_at": "2022-06-27T09:08:56Z"
},
{
"tag": "v2.44.1",
"kind": "patch",
"published_at": "2022-05-24T14:03:48Z"
},
{
"tag": "v2.44.0",
"kind": "minor",
"published_at": "2022-05-10T13:20:03Z"
},
{
"tag": "v2.43.0",
"kind": "minor",
"published_at": "2022-05-09T14:26:51Z"
},
{
"tag": "v2.42.1",
"kind": "patch",
"published_at": "2022-04-21T11:22:03Z"
},
{
"tag": "v2.42.0",
"kind": "minor",
"published_at": "2022-04-05T05:54:55Z"
},
{
"tag": "v2.41.0",
"kind": "minor",
"published_at": "2022-03-24T15:10:55Z"
},
{
"tag": "v2.40.2",
"kind": "patch",
"published_at": "2022-02-08T08:54:11Z"
},
{
"tag": "v2.40.1",
"kind": "patch",
"published_at": "2022-01-18T18:17:46Z"
},
{
"tag": "v2.40.0",
"kind": "minor",
"published_at": "2022-01-17T10:52:35Z"
},
{
"tag": "v2.39.0",
"kind": "minor",
"published_at": "2021-11-01T09:30:13Z"
},
{
"tag": "v2.38.0",
"kind": "minor",
"published_at": "2021-10-18T13:58:17Z"
},
{
"tag": "v2.37.1",
"kind": "patch",
"published_at": "2021-08-09T09:31:57Z"
},
{
"tag": "v2.37.0",
"kind": "minor",
"published_at": "2021-07-28T16:37:52Z"
},
{
"tag": "v2.36.1",
"kind": "patch",
"published_at": "2021-06-23T12:56:33Z"
}
],
"recent_commits": [
{
"oid": "255aac7cb9284f8ed472fd522ed6e4235131b671",
"body": "Update signature-verification.md",
"is_bot": false,
"headline": "Merge pull request #902 from mollie/fjbender-patch-1",
"author_name": "Florian Bender",
"author_login": "fjbender",
"committed_at": "2026-08-05T08:05:35Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "061646aa78dc3b8a771668677da60ed07dc3610e",
"body": "Clarify the untrusted branch of webhook processing.",
"is_bot": false,
"headline": "Update signature-verification.md",
"author_name": "Florian Bender",
"author_login": "fjbender",
"committed_at": "2026-08-05T08:04:39Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "724a12e08d576452a53cef8ffbc9c0687b054973",
"body": "fix: support applicationFee on payment link creation",
"is_bot": false,
"headline": "Merge pull request #895 from mollie/fix/payment-link-application-fee",
"author_name": "Krishan König",
"author_login": "Naoray",
"committed_at": "2026-06-08T09:21:04Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "b9283b3ca43a6cb794164f5e138b3c9c5a2651d9",
"body": "The Payment Links create endpoint silently dropped the applicationFee\nparameter. CreatePaymentLinkRequest had no applicationFee property or\npayload key, and CreatePaymentLinkRequestFactory never mapped it, so any\napplicationFee passed by callers was discarded without warning.\n\nMollie Connect support\n[…]\n both the modern request layer and the legacy endpoint (which\ndelegates to the same factory), mirroring CreatePaymentRequest. Reuses\nthe existing ApplicationFee value object and ApplicationFeeFactory.",
"is_bot": false,
"headline": "fix: support applicationFee on payment link creation",
"author_name": "Krishan Koenig",
"author_login": "Naoray",
"committed_at": "2026-06-05T12:17:18Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "94544db36bb99ef9cc12aab4e2d0ac85b110397d",
"body": null,
"is_bot": false,
"headline": "Update CLIENT_VERSION to 3.13.0",
"author_name": "Krishan Koenig",
"author_login": "Naoray",
"committed_at": "2026-06-01T12:10:54Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "f3655ce92f88c01683f19d0454016749b94d3013",
"body": "…pairing-code-endpoints\n\nfeat: add terminal pairing code endpoints",
"is_bot": false,
"headline": "Merge pull request #894 from gabrielciobanu-mollie/feat/add-terminal-…",
"author_name": "Krishan König",
"author_login": "Naoray",
"committed_at": "2026-06-01T12:00:20Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "2bd75594bb1d73b957c912a3378a1d16076df92c",
"body": "- typed TerminalPairingCodeQuery::INCLUDE_QR_CODE constant (drop hardcoded include)\n- realistic details.qrCode + revoked fixtures with hydration/isRevoked assertions\n- terminalPairingCodes section in endpoint-collections docs\n- paginated request arg order: from, limit, sort, profileId (match SDK pagination convention)\n\nCo-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>",
"is_bot": false,
"headline": "refactor: address review nits on terminal pairing codes",
"author_name": "Krishan Koenig",
"author_login": "Naoray",
"committed_at": "2026-06-01T11:57:30Z",
"body_truncated": false,
"is_coding_agent": true
},
{
"oid": "66597a61ab90afa67ae8081f7407a57df2cddf01",
"body": "feat: re-add payouts endpoints (restored after revert)",
"is_bot": false,
"headline": "Merge pull request #893 from mollie/feat/payouts-endpoints-v2",
"author_name": "Krishan König",
"author_login": "Naoray",
"committed_at": "2026-06-01T11:23:02Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "85c24a65f70d4fc613a73c9ca7e2cd637772af76",
"body": null,
"is_bot": false,
"headline": "feat: add terminal pairing code endpoints",
"author_name": "Gabriel Ciobanu",
"author_login": "gabrielciobanu-mollie",
"committed_at": "2026-05-25T14:57:45Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "7bd2aff9ec5347f3d7d772ef8eacf923546fd77e",
"body": "This reverts commit 4d07417705c500009efb1f5e3d50c373f7b5c717.",
"is_bot": false,
"headline": "Reapply \"Add payouts endpoints\"",
"author_name": "Krishan Koenig",
"author_login": "Naoray",
"committed_at": "2026-05-21T08:43:07Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "53e49e71dcf761ee8f1b06e3838d0e9904ea7d7f",
"body": "Revert \"Add payouts endpoints\"",
"is_bot": false,
"headline": "Merge pull request #892 from mollie/revert-890-add-payouts-endpoints",
"author_name": "Krishan König",
"author_login": "Naoray",
"committed_at": "2026-05-21T08:36:52Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "4d07417705c500009efb1f5e3d50c373f7b5c717",
"body": null,
"is_bot": false,
"headline": "Revert \"Add payouts endpoints\"",
"author_name": "Krishan König",
"author_login": "Naoray",
"committed_at": "2026-05-21T08:36:41Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "ac795298e9baec6a3ba566f1a790ff4d19fcfe64",
"body": "Add payouts endpoints",
"is_bot": false,
"headline": "Merge pull request #890 from mollie/add-payouts-endpoints",
"author_name": "Krishan König",
"author_login": "Naoray",
"committed_at": "2026-05-21T08:36:28Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "69c24eac0ea8acc9a1dc81130501641eaa14f3bb",
"body": null,
"is_bot": false,
"headline": "Merge branch 'main' into add-payouts-endpoints",
"author_name": "Krishan König",
"author_login": "Naoray",
"committed_at": "2026-05-21T08:18:15Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "15575cb4b46d9fe90b090f58b042aa0fd8fa8d2b",
"body": "Add new webhook event types",
"is_bot": false,
"headline": "Merge pull request #891 from mollie/add-new-webhook-event-types",
"author_name": "Krishan König",
"author_login": "Naoray",
"committed_at": "2026-05-21T08:16:23Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "88b61cb41c376850d981bbb6b6c5089f76fae7fe",
"body": null,
"is_bot": false,
"headline": "Add new webhook event types",
"author_name": "Krishan Koenig",
"author_login": "Naoray",
"committed_at": "2026-05-19T09:34:05Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "3183b4decdfaf5bae9f31be1999adcdb2f01d717",
"body": null,
"is_bot": false,
"headline": "Keep create payout testmode in payload",
"author_name": "Krishan Koenig",
"author_login": "Naoray",
"committed_at": "2026-05-19T08:27:06Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "1b7ec95fb9c1d494626388d617dc69283524da0c",
"body": null,
"is_bot": false,
"headline": "Align payout implementation with OpenAPI spec",
"author_name": "Krishan Koenig",
"author_login": "Naoray",
"committed_at": "2026-05-19T08:25:37Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "25c18d197e0a96084e66824e42093dac9d2b8aba",
"body": null,
"is_bot": false,
"headline": "Add missing payout resource fields",
"author_name": "Krishan Koenig",
"author_login": "Naoray",
"committed_at": "2026-05-19T08:16:06Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "ef062abcfedb898cb0bf6bb07ecd3547a22a1a59",
"body": null,
"is_bot": false,
"headline": "Remove redundant payout resource members",
"author_name": "Krishan Koenig",
"author_login": "Naoray",
"committed_at": "2026-05-19T08:14:07Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "109dff35290a4fc3aa6f82649598dd8ef6581dc3",
"body": null,
"is_bot": false,
"headline": "Fixes coding style",
"author_name": "Naoray",
"author_login": "Naoray",
"committed_at": "2026-05-19T08:09:23Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "5c015170c63073f62756964c121ff3bdff6c0e3c",
"body": null,
"is_bot": false,
"headline": "Add payouts endpoints",
"author_name": "Krishan Koenig",
"author_login": "Naoray",
"committed_at": "2026-05-19T08:09:02Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "68d3423ee68a3a57819eba37f09889ccbcb6c94c",
"body": null,
"is_bot": false,
"headline": "Update CLIENT_VERSION to 3.12.0",
"author_name": "Krishan Koenig",
"author_login": "Naoray",
"committed_at": "2026-05-19T07:31:58Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "b3d3db1edb53d939c000be33fb1715f45d611024",
"body": "fix: pass settlement pagination filters",
"is_bot": false,
"headline": "Merge pull request #889 from mollie/fix/settlement-pagination-filters",
"author_name": "Krishan König",
"author_login": "Naoray",
"committed_at": "2026-05-19T07:25:21Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "c6d9dee5665ecffd67cb19db8a25fcee38104343",
"body": "feat: add Google Pay direct integration support",
"is_bot": false,
"headline": "Merge pull request #888 from mollie/feat/google-pay-direct-integration",
"author_name": "Krishan König",
"author_login": "Naoray",
"committed_at": "2026-05-19T07:25:08Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "138ad8240a66b4f0f652e038d012479a3b472930",
"body": "fix: add scopes query parameter to list customer mandates",
"is_bot": false,
"headline": "Merge pull request #887 from mollie/fix/886-mandate-scopes",
"author_name": "Krishan König",
"author_login": "Naoray",
"committed_at": "2026-05-19T07:24:19Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "c934292fb6dc91cc9f5d73df82e5d84f6af42c8a",
"body": null,
"is_bot": false,
"headline": "docs: document mandate scope filters",
"author_name": "Krishan Koenig",
"author_login": "Naoray",
"committed_at": "2026-05-19T07:22:33Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "cd630f0fc126a734e4907d573a88d96a627cebaf",
"body": null,
"is_bot": false,
"headline": "Delete tests/Types/PaymentMethodTest.php",
"author_name": "Krishan König",
"author_login": "Naoray",
"committed_at": "2026-05-15T17:55:52Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "8edb2d1356c17d70a0065242714f804e87693f70",
"body": null,
"is_bot": false,
"headline": "Fixes coding style",
"author_name": "Naoray",
"author_login": "Naoray",
"committed_at": "2026-05-15T17:51:41Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "83d9f5b5688ea645e9c243aef44042881c8f5d1c",
"body": null,
"is_bot": false,
"headline": "fix: pass settlement pagination filters",
"author_name": "Krishan Koenig",
"author_login": "Naoray",
"committed_at": "2026-05-15T17:51:08Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "e51b217090b256e8ef3f74e81eb2cb222b4e9626",
"body": "Direct integration sends method=creditcard with googlePayPaymentToken\n(per docs.mollie.com/docs/direct-integration-of-google-pay). The\nPaymentMethod::GOOGLEPAY constant remains for hosted checkout method\nselection; docblock now spells out both flows.",
"is_bot": false,
"headline": "[agent] Align Google Pay test + constant with docs: method=creditcard",
"author_name": "Krishan Koenig",
"author_login": "Naoray",
"committed_at": "2026-05-12T18:59:44Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "9834dc338166f8ed1ec1a244a3bb3ff409b6b63a",
"body": null,
"is_bot": false,
"headline": "[agent] Expose customer-not-present mandate scope",
"author_name": "Krishan Koenig",
"author_login": "Naoray",
"committed_at": "2026-05-12T18:33:06Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "cb5bfb6d42cf4b90bb3ad852c2f4afde165ed92c",
"body": null,
"is_bot": false,
"headline": "[agent] Cover googlePayPaymentToken passthrough on CreatePaymentRequest",
"author_name": "Krishan Koenig",
"author_login": "Naoray",
"committed_at": "2026-05-12T18:25:13Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "f7c8b78648f55dfe9be17cde73cf07fb76b6cf9b",
"body": "…ntegration",
"is_bot": false,
"headline": "[agent] Add PaymentMethod::GOOGLEPAY constant for Google Pay direct i…",
"author_name": "Krishan Koenig",
"author_login": "Naoray",
"committed_at": "2026-05-12T18:24:37Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "85d8172282476b17341971c80092b780987ddb7d",
"body": "Step 4 of task: Issue #886 â list-mandates scopes[] query param\n\nAsserts the default request omits 'scopes', and that supplying scopes\nproduces an array-style query (scopes%5B0%5D=customer-present) on both\nthe raw GetPaginatedMandateRequest and the fluent\n$client->mandates->pageFor() path.",
"is_bot": false,
"headline": "[agent] Cover mandate scopes filter at request and endpoint level",
"author_name": "Krishan Koenig",
"author_login": "Naoray",
"committed_at": "2026-05-12T18:18:52Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "4de351f3bab370a8c7bb433deabb9b56fa0335c9",
"body": "Step 3 of task: Issue #886 â list-mandates scopes[] query param\n\nAppends $scopes as the last optional argument on pageFor/pageForId/\niteratorFor/iteratorForId to keep positional callers (including\nCustomer::mandates()) working unchanged.",
"is_bot": false,
"headline": "[agent] Plumb scopes through MandateEndpointCollection",
"author_name": "Krishan Koenig",
"author_login": "Naoray",
"committed_at": "2026-05-12T18:17:37Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "3ea8257cb031d14f23df825b1514619c46fab66c",
"body": "Step 2 of task: Issue #886 â list-mandates scopes[] query param",
"is_bot": false,
"headline": "[agent] Add MandateQuery type with scope constants",
"author_name": "Krishan Koenig",
"author_login": "Naoray",
"committed_at": "2026-05-12T18:17:14Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "ff455322db1a330d9b15ae2d8c30614c83d25e02",
"body": "Step 1 of task: Issue #886 â list-mandates scopes[] query param\n\nAdds optional fourth constructor argument $scopes (array of strings) to\nfilter the list-mandates endpoint by scope (e.g. customer-present).\nEmpty/null scopes are dropped, matching how Mollie's PHP query builder\ntreats other paginated request filters.",
"is_bot": false,
"headline": "[agent] Add scopes query parameter to GetPaginatedMandateRequest",
"author_name": "Krishan Koenig",
"author_login": "Naoray",
"committed_at": "2026-05-12T18:17:05Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "6c12186d53e9368b66d35da23c2b879c7a1c8616",
"body": "…onal-params\n\nfix: make all UpdateSalesInvoiceRequest params optional",
"is_bot": false,
"headline": "Merge pull request #885 from mollie/fix/883-update-sales-invoice-opti…",
"author_name": "Krishan König",
"author_login": "Naoray",
"committed_at": "2026-05-06T16:15:18Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "2ae4c5bc1dcfd48b9fd5ac27602af2088083e264",
"body": "…estFactory\n\nDrops the duplicate `with_no_optional_fields` test and switches\n`with_minimal_data` to an empty payload — same coverage, one test.\n\ncloses #883",
"is_bot": false,
"headline": "test: collapse minimal/empty payload tests for UpdateSalesInvoiceRequ…",
"author_name": "Krishan Koenig",
"author_login": "Naoray",
"committed_at": "2026-05-06T16:01:58Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "462c9fcd8f7aaed46f7c98c73f880e053cb706df",
"body": "fix: change customer email property type to a nullable string",
"is_bot": false,
"headline": "Merge pull request #882 from edwinvdpol/fix/nullable-customer-email",
"author_name": "Krishan König",
"author_login": "Naoray",
"committed_at": "2026-05-06T15:56:18Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "2042aa12dfe3f6c6e108de7b7fc77ac59226ddca",
"body": "fix(webhooks): hydrate entity locally from signed snapshot",
"is_bot": false,
"headline": "Merge pull request #879 from mollie/fix/webhook-local-hydration",
"author_name": "Krishan König",
"author_login": "Naoray",
"committed_at": "2026-05-06T15:55:40Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "4bb6636ddfaf9654bc22c3c2822a0f8d98ddc545",
"body": "The PATCH sales-invoices API requires no fields — the spec defines all\nproperties as optional. Previously status and recipientIdentifier were\nrequired constructor args, blocking callers from sending partial updates\n(e.g. only updating memo or status without a recipientIdentifier).\n\nCloses #883\n\nCo-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>",
"is_bot": false,
"headline": "fix: make all UpdateSalesInvoiceRequest params optional",
"author_name": "Florian Bender",
"author_login": "fjbender",
"committed_at": "2026-04-30T06:29:48Z",
"body_truncated": false,
"is_coding_agent": true
},
{
"oid": "837d7b0c1e2e8b0fbf23abe4dd0ea09d1d97a7c6",
"body": null,
"is_bot": false,
"headline": "fix: change email property type to a nullable string",
"author_name": "Edwin van de Pol",
"author_login": "edwinvdpol",
"committed_at": "2026-04-18T16:57:18Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "5972f2fd0e33163da92f495d81140e36b38cba3b",
"body": "CHANGELOG:\n- Drop the \"Added (fixtures / tests)\" section. Both files it listed\n (payment-link-paid.{full,simple}.json and RealPayloadShapeTest) were\n removed in commit 994d5cad as tautological, so the entry documented\n things users cannot see.\n- Merge the two \"webhook-hydrated resources return nu\n[…]\nponses guide would hit the nullability surprise\n only when it NPE'd in production.\n\nStep 16 of task: \"webhook hydration refactor\"\n\nCo-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>",
"is_bot": false,
"headline": "docs: tighten CHANGELOG entry and note getResponse nullability",
"author_name": "Krishan Koenig",
"author_login": "Naoray",
"committed_at": "2026-04-17T14:54:39Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "994d5cad3590623465f21cf67e369c398fc31bb5",
"body": "Three classes of test were asserting behaviour the SDK cannot break:\n\n- `RealPayloadShapeTest` read fixture JSON that the PR itself committed\n and asserted its shape. The fixtures were not captured from a live\n source; we authored them. The assertions verified \"we can parse JSON\n we wrote a momen\n[…]\nrator::hydrate` — the\nclass-level docblock already explains the round-trip purpose.\n\nStep 15 of task: \"webhook hydration refactor\"\n\nCo-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>",
"is_bot": false,
"headline": "[agent] Delete tautological tests and fixtures",
"author_name": "Krishan Koenig",
"author_login": "Naoray",
"committed_at": "2026-04-17T14:48:48Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "89d90fcb1382bc5fca4399c2d95ebf63d1cffcbe",
"body": "- Drop `response_implements_resource_origin` — PHPUnit-mock-based check\n was vacuous, and PHPStan + every test that actually uses Response as a\n ResourceOrigin already enforce the declaration at a higher signal.\n- Drop the redundant `as_resource_returns_any_resource_for_unknown_resource_types` —\n \n[…]\nleft over from earlier iterations where the\n test name already conveys the intent.\n\nStep 14 of task: \"webhook hydration refactor\"\n\nCo-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>",
"is_bot": false,
"headline": "[agent] Address test-quality audit findings",
"author_name": "Krishan Koenig",
"author_login": "Naoray",
"committed_at": "2026-04-17T14:42:05Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "e46abd06f19f8a5ae75b8577ea9ddc3ece12c249",
"body": "refactor(webhooks): decouple hydrated resources from the HTTP domain",
"is_bot": false,
"headline": "Merge pull request #880 from mollie/refactor/resource-origin",
"author_name": "Krishan König",
"author_login": "Naoray",
"committed_at": "2026-04-17T14:18:31Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "8b5721637565845e932f87b95eaa3569c8587648",
"body": "The existing \"Processing Webhook Payloads\" snippet shows the parse +\nmatch step but stops short of illustrating the two-phase flow a real\nhandler uses: read-from-snapshot (no HTTP, no API key) and fetch-fresh\n(HTTP, key required). Readers asked for a single copyable example that\ncovers both paths wi\n[…]\n\npages use, with the signing-secret-only deployment called out as a\nsupported mode.\n\nStep 13 of task: \"webhook hydration refactor\"\n\nCo-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>",
"is_bot": false,
"headline": "[agent] Add end-to-end handler example to webhooks docs",
"author_name": "Krishan Koenig",
"author_login": "Naoray",
"committed_at": "2026-04-17T14:12:11Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "01dcd5f275d9f9819d171f3789a2dc202c03382f",
"body": "The two paragraphs under \"Inspecting webhook provenance\" contradicted\neach other: one said \"set the key or fetch details with a dedicated\nrequest\" (nonsense — a dedicated request also needs the key) and the\nnext said \"either way you get a live collection\" (omitting the\nauthenticator caveat entirely)\n[…]\n text was left over from\nan earlier pass that assumed a resource-type-keyed shape).\n\nStep 12 of task: \"webhook hydration refactor\"\n\nCo-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>",
"is_bot": false,
"headline": "[agent] Clarify webhook follow-up calls require an API key",
"author_name": "Krishan Koenig",
"author_login": "Naoray",
"committed_at": "2026-04-17T14:07:00Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "c8db1d2e24c1dbb6eadcd01543cdbd1cbfb2db8c",
"body": null,
"is_bot": false,
"headline": "Fixes coding style",
"author_name": "Naoray",
"author_login": "Naoray",
"committed_at": "2026-04-17T14:01:08Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "b9ae8a7518c4111df8f9239a319ff77a31a326ee",
"body": null,
"is_bot": false,
"headline": "fix: preserve testmode in webhook-origin fallbacks",
"author_name": "Krishan Koenig",
"author_login": "Naoray",
"committed_at": "2026-04-17T13:56:55Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "f53293a64658ccb3a47cb196be22893e6c758cd3",
"body": "Previously, webhook-origin resources whose embedded snapshot lacked a\n`_links.{name}.href` entry silently returned an empty collection from\nfollow-up methods. That was a behavioural gap between HTTP-origin\n(which always carries the links) and webhook-origin, and pushed the\nresponsibility of a workar\n[…]\n` delegate to\n`setOrigin()` rather than poking at the underlying property directly.\n\nStep 11 of task: \"webhook hydration refactor\"\n\nCo-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>",
"is_bot": false,
"headline": "[agent] Auto-route follow-up methods when webhook snapshots omit _links",
"author_name": "Krishan Koenig",
"author_login": "Naoray",
"committed_at": "2026-04-17T13:47:44Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "33043005401913089b73211671d4ea5e3ecf8eac",
"body": "Mollie keys the embedded resource under _embedded.entity, confirmed\nagainst the docs. An earlier pass mis-read one docs page as showing a\nresource-type-keyed shape and flipped the fixtures + MockEvent to\nmatch; revert that.\n\nThe mapper's key-agnostic iteration stays in place — it correctly\nresolves \n[…]\n\nfuture _embedded sub-blocks, which is worth keeping independently of\nthe key name.\n\nStep 10 of task: \"webhook hydration refactor\"\n\nCo-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>",
"is_bot": false,
"headline": "[agent] Use canonical _embedded.entity key in webhook fixtures and mocks",
"author_name": "Krishan Koenig",
"author_login": "Naoray",
"committed_at": "2026-04-17T13:43:10Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "d03cf4559447a1b4cb500f340f988b97c95158ad",
"body": "\"HAL\" and \"HAL sub-link\" read as REST-protocol shorthand that users of\nthis SDK don't need to learn. Rewrite the docs/webhooks.md subsection\nand the matching CHANGELOG note in plain language: the resource's\n_links object carries URLs to follow-up resources, and those URLs may\nbe absent on lean webhook snapshots.\n\nStep 9 of task: \"webhook hydration refactor\"\n\nCo-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>",
"is_bot": false,
"headline": "[agent] Rephrase missing-link docs without the HAL jargon",
"author_name": "Krishan Koenig",
"author_login": "Naoray",
"committed_at": "2026-04-17T13:36:25Z",
"body_truncated": false,
"is_coding_agent": true
},
{
"oid": "d9976e23601ef38df8ad526938828f9bf3b3593d",
"body": "The method hydrates the embedded snapshot into a fully-typed SDK\nresource (Payment, PaymentLink, BalanceTransaction, etc.) and returns\na BaseResource. Naming it asEntity was backwards: $event->entity() is\nalready the getter that returns the WebhookEntity wrapper, so\nasEntity() reads as \"convert to e\n[…]\nry with\nthe rest of the SDK, where \"Resource\" means a typed\nPayment/PaymentLink/etc.\n\nStep 8 of task: \"webhook hydration refactor\"\n\nCo-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>",
"is_bot": false,
"headline": "[agent] Rename BaseEvent::asEntity to asResource",
"author_name": "Krishan Koenig",
"author_login": "Naoray",
"committed_at": "2026-04-17T13:35:01Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "a13c6e7f474a38090ae0211317e80184af59b5f2",
"body": null,
"is_bot": false,
"headline": "Fixes coding style",
"author_name": "Naoray",
"author_login": "Naoray",
"committed_at": "2026-04-17T13:16:30Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "423a6851141a4666d09c87c81db8ed4213fd539e",
"body": "Several follow-up methods depend on a HAL link being present on the\nembedded snapshot and silently return empty collections when the link\nis absent. HTTP responses always carry those links; webhook deliveries\nmay not. Document the pattern and the recommended workaround (fetch\nthe resource via a dedi\n[…]\nworth stating explicitly because the Mollie docs example payloads\nuse relative URLs.\n\nStep 7 of task: \"webhook hydration refactor\"\n\nCo-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>",
"is_bot": false,
"headline": "[agent] Document HAL sub-link availability gap on webhook origin",
"author_name": "Krishan Koenig",
"author_login": "Naoray",
"committed_at": "2026-04-17T13:16:02Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "25c066806a53c686c3f7cf3203366034f7373802",
"body": "Brings user-facing docs in sync with the new webhook hydration story\nand spells out the runtime BC risk in release notes.\n\n- `docs/webhooks.md`: steer users at `$event->asEntity($mollie)` which\n automatically propagates the rich webhook origin. Add an \"Inspecting\n webhook provenance\" section cover\n[…]\n the removed\n synthetic-response machinery, and the captured real-payload fixtures.\n\nStep 6 of task: \"webhook hydration refactor\"\n\nCo-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>",
"is_bot": false,
"headline": "[agent] Document webhook origin surface and honest BC framing",
"author_name": "Krishan Koenig",
"author_login": "Naoray",
"committed_at": "2026-04-17T12:29:23Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "13ddc85907ec243d1e40f043486e256c749fd9dd",
"body": "Completes the storage migration by removing the dual-write mirror from\n`HasResponse` and narrowing the `IsResponseAware` contract to match\nobservable behavior on webhook-origin resources.\n\n- Migrates the 15 internal `$this->response` propagation sites to\n `$this->getOrigin()`:\n - `Resources\\Paym\n[…]\nce test — same class of baseline entry already\n existed for `ResourceHydratorTest`.\n\nStep 5 of task: \"webhook hydration refactor\"\n\nCo-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>",
"is_bot": false,
"headline": "[agent] Migrate internal call sites to origin, narrow IsResponseAware",
"author_name": "Krishan Koenig",
"author_login": "Naoray",
"committed_at": "2026-04-17T12:29:12Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "65fc78f766df721e3254b5b5a4ae56e96520ad30",
"body": "…ic Response\n\nReplaces the fabricated HTTP `Response` that `WebhookEntity::asResource()`\nused to construct with the proper webhook origin path. Webhook hydration\nnow runs zero HTTP middleware and requires no API key on the connector.\n\n- `WebhookEntity::asResource(Connector, ?WebhookSnapshotOrigin = \n[…]\nagnostic `_embedded` iteration including\n future-proofing against extra sub-blocks.\n\nStep 4 of task: \"webhook hydration refactor\"\n\nCo-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>",
"is_bot": false,
"headline": "[agent] Wire webhook hydration through SnapshotHydrator, drop synthet…",
"author_name": "Krishan Koenig",
"author_login": "Naoray",
"committed_at": "2026-04-17T12:28:54Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "b2b1998b9630e3d263235ff6d2a86c82a5cfeb5e",
"body": "…drator\n\nScaffolds the webhook hydration seam. All changes preserve HTTP-path\nbehavior byte-for-byte because Response already implements\nResourceOrigin (PR1).\n\n- `Webhooks\\WebhookSnapshotOrigin` — final value object carrying the\n webhook event id, signature (nullable), and received-at timestamp.\n \n[…]\n by the 15 internal call sites that\n propagate origin forward to child collections.\n\nStep 3 of task: \"webhook hydration refactor\"\n\nCo-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>",
"is_bot": false,
"headline": "[agent] Add WebhookSnapshotOrigin, SnapshotHydrator, widen ResourceHy…",
"author_name": "Krishan Koenig",
"author_login": "Naoray",
"committed_at": "2026-04-17T12:28:16Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "1dbe9339aa0a5936327ed30adf6c8c160913a323",
"body": "Introduces the seam required for webhook-hydrated resources to carry\ntheir provenance without fabricating a synthetic HTTP `Response`.\nPurely additive: no existing behavior changes and no user code has to\nmigrate.\n\n- New `Contracts\\ResourceOrigin` interface exposing `getConnector()`.\n- `Http\\Respons\n[…]\n the response slot, and the nullable getPendingRequest()\nbehavior across both paths.\n\nStep 2 of task: \"webhook hydration refactor\"\n\nCo-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>",
"is_bot": false,
"headline": "[agent] Add ResourceOrigin contract and origin accessors on resources",
"author_name": "Krishan Koenig",
"author_login": "Naoray",
"committed_at": "2026-04-17T12:22:17Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "a6f097f1275feb9e9d09c0c8cfe81e6705487377",
"body": "Real Mollie webhook POST deliveries key the embedded entity by its\nresource type (e.g. `_embedded[\"payment-link\"]`), not by the literal\nkey `\"entity\"` used by the GET /v2/events/{id} API. The existing\nMockEvent flow used the literal `entity` key, which made tests pass\nbut does not match real webhook\n[…]\ne `src/Fake/Responses/webhook-event.json` with the same\n resource-type-keyed shape.\n\nStep 1 of task: \"webhook hydration refactor\"\n\nCo-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>",
"is_bot": false,
"headline": "[agent] Capture real Mollie webhook POST payload shape as fixtures",
"author_name": "Krishan Koenig",
"author_login": "Naoray",
"committed_at": "2026-04-17T12:21:13Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "d750342e5ab1a7da822d5c69382dc5a85380ffe1",
"body": "The old comment (\"This only works if you subscribe to full event\npayloads\") described the pre-fix behaviour where a missing snapshot\ntriggered a live HTTP fetch. Local hydration is now unconditional, so\nthe interesting thing to explain is that $event->entity() is null when\nyou subscribe to the simple payload shape (entityId only) and that the\ncaller is responsible for fetching the resource in that case.\n\nCo-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>",
"is_bot": false,
"headline": "docs(webhooks): clarify asResource no longer refetches over HTTP",
"author_name": "Krishan Koenig",
"author_login": "Naoray",
"committed_at": "2026-04-17T08:31:09Z",
"body_truncated": false,
"is_coding_agent": true
},
{
"oid": "fa3e8f0d000a53abeb4447e112b5fb0c32885891",
"body": "WebhookEntityTestMapper decodes the payload as an associative array.\nFeeding that straight into ResourceHydrator left $resource->amount and\nother nested values as PHP arrays, diverging from the HTTP-fetched\nshape where json_decode returns stdClass. That broke object notation\naccess (e.g. $payment->a\n[…]\nute the decoded stdClass from\n$response->json() into hydrate() so webhook-hydrated resources match\nthe HTTP-hydrated ones exactly.\n\nCo-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>",
"is_bot": false,
"headline": "fix(webhooks): hydrate nested values as stdClass to match HTTP path",
"author_name": "Krishan Koenig",
"author_login": "Naoray",
"committed_at": "2026-04-17T08:31:01Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "a8ec566140881b0a7de00513c323eb09dfb75cf4",
"body": "The docblock listed Response|BaseResource|BaseCollection|LazyCollection|IsWrapper\nbut the method only ever returns the passed BaseResource. The incorrect\nsignature was likely a copy-paste from ResourceResolver::resolve(), which\ndoes fan out across those types.\n\nAdds a real `: BaseResource` return type and drops the now-unused IsWrapper\nimport.\n\nCo-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>",
"is_bot": false,
"headline": "chore(resources): correct ResourceHydrator::hydrate() return type",
"author_name": "Krishan Koenig",
"author_login": "Naoray",
"committed_at": "2026-04-17T08:15:08Z",
"body_truncated": false,
"is_coding_agent": true
},
{
"oid": "0af0a4345e2c3391ce0c503546341c072a063728",
"body": "Commit b0cdd5ff renamed MockEvent::full() to MockEvent::snapshot() to match\ndashboard terminology. The docs example was missed.\n\nCo-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>",
"is_bot": false,
"headline": "docs(webhooks): fix MockEvent method reference full() -> snapshot()",
"author_name": "Krishan Koenig",
"author_login": "Naoray",
"committed_at": "2026-04-17T08:12:56Z",
"body_truncated": false,
"is_coding_agent": true
},
{
"oid": "5d2ce8ae2cbb001727eab07cc0cc095a479256f8",
"body": "… refetch\n\nNext-gen webhooks ship the full signed resource state in `_embedded.entity`.\nThe previous asResource() implementation ignored that payload and always\nfired an HTTP GET to fetch a fresh copy, which:\n\n- crashed on sub-resources like BalanceTransaction that have no top-level\n GET endpoint (\n[…]\n `isInTestmode()` reading from the snapshot data — keeps the property\nstate in one place and drops a stale phpstan baseline entry.\n\nCo-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>",
"is_bot": false,
"headline": "fix(webhooks): hydrate entity locally from signed snapshot, skip HTTP…",
"author_name": "Krishan Koenig",
"author_login": "Naoray",
"committed_at": "2026-04-17T08:12:39Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "ef526b9e4eb0c87e294f275e4f11d07b33e08a34",
"body": null,
"is_bot": false,
"headline": "Update CLIENT_VERSION to 3.10.0",
"author_name": "Krishan Koenig",
"author_login": "Naoray",
"committed_at": "2026-04-15T10:56:54Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "f40611260d65f7a4934bd5484a831949444f438a",
"body": null,
"is_bot": false,
"headline": "docs: add CLAUDE.md with project guidance for Claude Code",
"author_name": "Krishan Koenig",
"author_login": "Naoray",
"committed_at": "2026-04-15T10:55:34Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "c761449fc16937ae21b09bd066e0648d3beb7989",
"body": "feat(sessions): align session endpoint with API specification",
"is_bot": false,
"headline": "Merge pull request #858 from mollie/feat/update-session-endpoint",
"author_name": "Krishan König",
"author_login": "Naoray",
"committed_at": "2026-04-15T10:52:57Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "5508d0c886635d7bd3736e860951235c0190ffd3",
"body": "Only create and get are supported by the Sessions API. Remove update,\ncancel, and list/iterator endpoints along with the now-unused\nCancelSessionRequest, SessionCollection, and their tests.\n\nPer Flo (Mollie): cancel + list are out of scope, update is unstable.",
"is_bot": false,
"headline": "feat(sessions): drop update/cancel/list — out of scope per Mollie API",
"author_name": "Krishan Koenig",
"author_login": "Naoray",
"committed_at": "2026-04-15T09:30:56Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "92c7af574fd62f683c7832fbbce11dc63fe26628",
"body": "feat: add lines, addresses and minimumAmount to Payment Links API",
"is_bot": false,
"headline": "Merge pull request #877 from mollie/feat/payment-links-klarna-support",
"author_name": "Krishan König",
"author_login": "Naoray",
"committed_at": "2026-04-15T09:23:45Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "efb35b7391318e0e97e57a4f64b1625ed61d116c",
"body": "Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>",
"is_bot": false,
"headline": "chore: drop /.claude/skills/ from .gitignore",
"author_name": "Krishan Koenig",
"author_login": "Naoray",
"committed_at": "2026-04-15T09:23:21Z",
"body_truncated": false,
"is_coding_agent": true
},
{
"oid": "e1a89b7b4d806e5ed90e72222942de30355ec611",
"body": "Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>",
"is_bot": false,
"headline": "chore: remove superpowers spec from repo",
"author_name": "Krishan Koenig",
"author_login": "Naoray",
"committed_at": "2026-04-15T09:20:42Z",
"body_truncated": false,
"is_coding_agent": true
},
{
"oid": "ab6205a194274bc33d7e2b02f3a5fcf63c300969",
"body": "Fix onFatal callback bug + strict comparison consistency",
"is_bot": false,
"headline": "Merge pull request #874 from mollie/audit/code-quality",
"author_name": "Krishan König",
"author_login": "Naoray",
"committed_at": "2026-04-15T09:13:13Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "ac5d0b1424c72e782904235717a78dabbdc9afdd",
"body": "Key changes from review:\n- Drop readonly from resource properties (incompatible with hydrator)\n- Use enum|string union types for forward-compat instead of tryFrom fallback\n- Replace infer syntax with PHPStan conditional return type (with overload fallback)\n- Replace fromFloat/fromCents with precisio\n[…]\num candidates)\n- Add collection class generic typing\n- Update UPGRADING.md impact table with readonly/Macroable/strict_types risks\n\nCo-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>",
"is_bot": false,
"headline": "docs: update v4 spec with counselors review findings",
"author_name": "Krishan Koenig",
"author_login": "Naoray",
"committed_at": "2026-04-03T10:10:29Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "866c96d8418100755e7f1725e53cb671e77273be",
"body": "Covers enums, readonly classes, typed response resources,\ntwo-tier hydration, generic send() return types, Money\nconvenience factories, Macroable extension, retry middleware,\nRector migration ruleset, and release checklist.\n\nResolves design for #875 and #876.\n\nCo-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>",
"is_bot": false,
"headline": "docs: add v4 PHP 8.2+ modernization design spec",
"author_name": "Krishan Koenig",
"author_login": "Naoray",
"committed_at": "2026-04-03T09:38:22Z",
"body_truncated": false,
"is_coding_agent": true
},
{
"oid": "463d959f0eafc9c88a73e619660e67e644036dcc",
"body": "The update endpoint supports lines, billingAddress, shippingAddress,\nand minimumAmount — same as create. Wire them up in both the request\nclass and factory.\n\nCo-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>",
"is_bot": false,
"headline": "feat: add Klarna fields to UpdatePaymentLinkRequest",
"author_name": "Krishan Koenig",
"author_login": "Naoray",
"committed_at": "2026-04-03T08:50:07Z",
"body_truncated": false,
"is_coding_agent": true
},
{
"oid": "6002ce41b7143321e3e00ad94ba333452c76472a",
"body": "…s API\n\nAdds Klarna/BNPL support to CreatePaymentLinkRequest and its factory:\n- lines (DataCollection of OrderLine) for itemised order data\n- billingAddress and shippingAddress (Address) for Klarna credit decisions\n- minimumAmount (Money) for open-amount payment links with a floor price\n\nAll new par\n[…]\n\nUpdates the mock fixture with realistic Klarna example data (distinct\nbilling vs shipping addresses) and adds factory + request-layer tests.\n\nCo-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>",
"is_bot": false,
"headline": "feat: add lines, addresses, and minimumAmount support to Payment Link…",
"author_name": "Krishan Koenig",
"author_login": "Naoray",
"committed_at": "2026-04-03T08:20:15Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "a3113b87d57c97ad5dacd94a3c9ee2dbcda2ac3c",
"body": null,
"is_bot": false,
"headline": "Merge master into feat/update-session-endpoint",
"author_name": "Krishan Koenig",
"author_login": "Naoray",
"committed_at": "2026-04-03T08:11:09Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "f6b3d752dc4d43b07190a61ad62890a873c42003",
"body": "self refers to the declaring class, which conflicts with new static()\nand causes PHPStan to fail. static correctly reflects the late-static-\nbinding semantics of the factory method.",
"is_bot": false,
"headline": "fix(types): use static return type on ResourceCollection::withResponse()",
"author_name": "Krishan Koenig",
"author_login": "Naoray",
"committed_at": "2026-04-03T08:06:08Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "2e81297a29cd2c1fcc618b5528b3745d1595cad3",
"body": "_links.redirect no longer exists in the Session API response per the\nupdated spec — the method always returned null. The redirect URL is\nnow directly available as $session->redirectUrl.",
"is_bot": false,
"headline": "fix(sessions): remove stale getRedirectUrl() helper",
"author_name": "Krishan Koenig",
"author_login": "Naoray",
"committed_at": "2026-04-03T07:48:34Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "961865af628fa30c39ac4977629df3be8227ba59",
"body": "# Conflicts:\n#\tsrc/MollieApiClient.php",
"is_bot": false,
"headline": "Merge remote-tracking branch 'origin/master' into audit/code-quality",
"author_name": "Krishan Koenig",
"author_login": "Naoray",
"committed_at": "2026-03-22T16:24:23Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "2430672bdf8b765e19652af521c01756ce8a80c2",
"body": null,
"is_bot": false,
"headline": "Merge remote-tracking branch 'origin/main' into audit/code-quality",
"author_name": "Krishan Koenig",
"author_login": "Naoray",
"committed_at": "2026-03-22T16:19:19Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "6feb9bbfede72eea26603e08f2ca987c5b3c2eec",
"body": "…ecation\n\nFix PHP 8+ deprecation warning in CreatePaymentRefundRequest",
"is_bot": false,
"headline": "Merge pull request #872 from mollie/fix/refund-request-parameter-depr…",
"author_name": "Krishan König",
"author_login": "Naoray",
"committed_at": "2026-03-22T16:18:08Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "16a3efbc0d4b52310da27f9ac521180870fac4af",
"body": "The parameter.requiredAfterOptional baseline ignore is no longer needed\nsince the constructor now uses ?Money $amount = null.\n\nCo-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>",
"is_bot": false,
"headline": "chore: remove resolved PHPStan baseline entry for parameter ordering",
"author_name": "Krishan Koenig",
"author_login": "Naoray",
"committed_at": "2026-03-22T16:17:12Z",
"body_truncated": false,
"is_coding_agent": true
},
{
"oid": "21fa17161a88688c2191f5ab4b6a10feb21c0de6",
"body": "…to fix/refund-request-parameter-deprecation",
"is_bot": false,
"headline": "Merge remote-tracking branch 'origin/fix/phpstan-ci-actions-cache' in…",
"author_name": "Krishan Koenig",
"author_login": "Naoray",
"committed_at": "2026-03-22T16:16:34Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "184b1ece2c2723c7e08da54c1836e4b857bf3714",
"body": "Fix PHPStan CI: replace ramsey/composer-install with plain composer install",
"is_bot": false,
"headline": "Merge pull request #873 from mollie/fix/phpstan-ci-actions-cache",
"author_name": "Krishan König",
"author_login": "Naoray",
"committed_at": "2026-03-22T16:15:08Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "d2694af4dca2e48c12ac172d624c6dab7a41750b",
"body": "The method creates `new static()` so the real return type is `static`,\nnot `self`. Use a @return static docblock to satisfy PHPStan while\nkeeping `self` in the type hint for PHP 7.4 compatibility.\n\nCo-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>",
"is_bot": false,
"headline": "fix: correct return type of ResourceCollection::withResponse()",
"author_name": "Krishan Koenig",
"author_login": "Naoray",
"committed_at": "2026-03-22T16:10:35Z",
"body_truncated": false,
"is_coding_agent": true
},
{
"oid": "d3337bb73e422d673ef3eb107fe5ff7b2be638c7",
"body": "…ormation\n\nThe onFatal handler wrapper was discarding the callback's return value\nand always returning the original exception. Now the callback return\nvalue is used if it is a MollieException, otherwise the original\nexception is preserved.\n\nCo-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>",
"is_bot": false,
"headline": "fix: use return value from onFatal callback to allow exception transf…",
"author_name": "Krishan Koenig",
"author_login": "Naoray",
"committed_at": "2026-03-22T15:54:22Z",
"body_truncated": false,
"is_coding_agent": true
},
{
"oid": "1b5d957ff38903d0a655a12dea0f43a94735ba54",
"body": "…lection\n\nReplace loose == with strict === in status check methods and key\ncomparison to match the convention used by all other resource classes.\nLoose comparisons can produce unexpected results with type coercion.\n\nCo-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>",
"is_bot": false,
"headline": "fix: use strict comparison operators in Profile, Invoice, and LazyCol…",
"author_name": "Krishan Koenig",
"author_login": "Naoray",
"committed_at": "2026-03-22T15:54:18Z",
"body_truncated": false,
"is_coding_agent": true
},
{
"oid": "b025b72f04713d49688b4ace98876ae0b3ed4b4a",
"body": "…in PHPStan workflow\n\nramsey/composer-install@v3 internally SHA-pins actions/cache@v4.2.4,\nwhich is rejected by the org's allowed actions policy (only tag\nreferences like actions/cache@v4 are permitted).\n\nReplace with plain `composer install` to match the pattern used by the\ntests workflow.\n\nCo-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>",
"is_bot": false,
"headline": "fix(ci): replace ramsey/composer-install with plain composer install …",
"author_name": "Krishan Koenig",
"author_login": "Naoray",
"committed_at": "2026-03-22T15:45:22Z",
"body_truncated": false,
"is_coding_agent": true
},
{
"oid": "861630dbe9a07f6b6d3002ec39dc489d62914942",
"body": "… constructor\n\nMake $amount parameter default to null instead of being required after\nthe optional $description parameter. This eliminates the compile-time\nPHP 8+ deprecation warning while maintaining full backwards compatibility.\n\nA runtime InvalidArgumentException is thrown if $amount is not provided,\npreserving the same effective contract.\n\nCloses #868\nCloses #835\n\nCo-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>",
"is_bot": false,
"headline": "fix: resolve PHP 8+ deprecation warning in CreatePaymentRefundRequest…",
"author_name": "Krishan Koenig",
"author_login": "Naoray",
"committed_at": "2026-03-22T14:58:36Z",
"body_truncated": false,
"is_coding_agent": true
},
{
"oid": "6d7a3e12fc3ca505c98305696aa296b91858be6e",
"body": "feat: Add BACS mandate method for UK direct debit support",
"is_bot": false,
"headline": "Merge pull request #870 from sandervanhooft/feat/add-bacs-mandate-method",
"author_name": "Krishan König",
"author_login": "Naoray",
"committed_at": "2026-03-22T14:13:37Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "0ef76710b58bbb2c5b6c4824d2f57f7fca533a6c",
"body": "…et-types\n\nFix: Add missing `googlepay` type to wallet constants",
"is_bot": false,
"headline": "Merge pull request #869 from NormanAlbert91/na/add-google-pay-to-wall…",
"author_name": "Krishan König",
"author_login": "Naoray",
"committed_at": "2026-03-22T13:56:14Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "9df7d15dbeaf6c840b38344bb0c7e45c270e2b5c",
"body": "…ion-url\n\ndocs: fix documentation reference url",
"is_bot": false,
"headline": "Merge pull request #871 from dionnijssen/fix-multicurrency-documentat…",
"author_name": "Krishan König",
"author_login": "Naoray",
"committed_at": "2026-03-22T13:55:38Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "a262d2e50aa9dca0b3c4403f243eec3da592660e",
"body": null,
"is_bot": false,
"headline": "docs: fix documentation reference url",
"author_name": "Dion",
"author_login": "dionnijssen",
"committed_at": "2026-03-19T18:16:46Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "78d0fe90cbbcf13bb73b847543209d8c3a8cb585",
"body": "BACS (Bankers' Automated Clearing Services) is the UK direct debit system\nand creates its own mandate type 'bacs', distinct from SEPA 'directdebit'.\n\nAccording to Mollie's recurring payments documentation, when a first payment\nis made via BACS, the resulting mandate type is 'bacs'.\n\nChanges:\n- Add MandateMethod::BACS constant\n- Update getForFirstPaymentMethod() to return BACS for PaymentMethod::BACS\n- Add test case for BACS mandate method",
"is_bot": false,
"headline": "feat: Add BACS mandate method for UK direct debit support",
"author_name": "Sander van Hooft",
"author_login": null,
"committed_at": "2026-03-12T12:17:44Z",
"body_truncated": false,
"is_coding_agent": false
}
],
"releases_count": 100,
"commits_last_year": 271,
"latest_release_at": "2026-06-08T09:26:38Z",
"latest_release_tag": "v3.13.1",
"releases_from_tags": false,
"days_since_last_push": 0,
"active_weeks_last_year": 32,
"days_since_latest_release": 57,
"mean_days_between_releases": 24.8
},
"artifacts": {
"collected": true,
"structure": [],
"declarations": []
},
"community": {
"has_readme": true,
"has_license": true,
"readme_badges": {
"hosts": [
"github.com",
"poser.pugx.org",
"shields.io"
],
"total": 4,
"header": 4,
"collected": true,
"has_inspect_badge": false
},
"has_description": true,
"has_contributing": false,
"health_percentage": 50,
"has_issue_template": true,
"has_code_of_conduct": false,
"has_pull_request_template": false
},
"ecosystem": {
"packages": [
{
"name": "mollie/mollie-api-php",
"exists": true,
"license": "BSD-2-Clause",
"keywords": [
"api",
"payment",
"payments",
"service",
"gateway",
"paypal",
"ideal",
"mollie",
"paysafecard",
"sepa",
"recurring",
"subscriptions",
"creditcard",
"sofort",
"direct debit",
"mistercash",
"klarna",
"bancontact",
"sofortbanking",
"charges",
"CBC",
"banktransfer",
"belfius",
"belfius direct net",
"refunds",
"Przelewy24",
"podiumcadeaukaart",
"kbc",
"Apple Pay",
"gift cards",
"intersolve",
"fashioncheque",
"inghomepay",
"paylater",
"sliceit"
],
"ecosystem": "packagist",
"categories": [],
"matches_repo": true,
"registry_url": "https://packagist.org/packages/mollie/mollie-api-php",
"declared_type": "library",
"is_deprecated": false,
"latest_version": "v3.13.1",
"repository_url": "https://github.com/mollie/mollie-api-php",
"versions_count": 236,
"total_downloads": 16681513,
"dependents_count": 67,
"deprecation_note": null,
"maintainers_count": null,
"monthly_downloads": 566919,
"first_published_at": null,
"latest_published_at": "2026-06-08T09:26:28Z",
"latest_version_yanked": null,
"days_since_latest_publish": 57
}
]
},
"popularity": {
"forks": 199,
"stars": 602,
"watchers": 61,
"fork_history": {
"days": [
{
"date": "2013-12-13",
"count": 1
},
{
"date": "2013-12-14",
"count": 1
},
{
"date": "2013-12-27",
"count": 1
},
{
"date": "2014-03-12",
"count": 1
},
{
"date": "2014-03-19",
"count": 1
},
{
"date": "2014-06-21",
"count": 1
},
{
"date": "2014-07-09",
"count": 1
},
{
"date": "2014-11-12",
"count": 1
},
{
"date": "2014-12-01",
"count": 1
},
{
"date": "2014-12-13",
"count": 1
},
{
"date": "2015-02-22",
"count": 1
},
{
"date": "2015-04-04",
"count": 1
},
{
"date": "2015-04-30",
"count": 1
},
{
"date": "2015-06-25",
"count": 1
},
{
"date": "2015-09-01",
"count": 1
},
{
"date": "2015-09-16",
"count": 1
},
{
"date": "2015-11-09",
"count": 1
},
{
"date": "2015-12-07",
"count": 1
},
{
"date": "2015-12-29",
"count": 1
},
{
"date": "2016-02-06",
"count": 1
},
{
"date": "2016-02-22",
"count": 1
},
{
"date": "2016-06-10",
"count": 1
},
{
"date": "2016-06-26",
"count": 1
},
{
"date": "2016-07-05",
"count": 1
},
{
"date": "2016-08-08",
"count": 1
},
{
"date": "2016-08-10",
"count": 1
},
{
"date": "2016-08-30",
"count": 1
},
{
"date": "2016-09-05",
"count": 1
},
{
"date": "2016-09-09",
"count": 1
},
{
"date": "2016-10-08",
"count": 1
},
{
"date": "2016-11-18",
"count": 1
},
{
"date": "2016-11-28",
"count": 1
},
{
"date": "2016-12-09",
"count": 1
},
{
"date": "2017-01-08",
"count": 1
},
{
"date": "2017-01-20",
"count": 1
},
{
"date": "2017-02-27",
"count": 1
},
{
"date": "2017-03-18",
"count": 1
},
{
"date": "2017-04-19",
"count": 1
},
{
"date": "2017-06-21",
"count": 1
},
{
"date": "2017-08-04",
"count": 1
},
{
"date": "2017-08-23",
"count": 1
},
{
"date": "2017-09-18",
"count": 1
},
{
"date": "2017-10-09",
"count": 1
},
{
"date": "2017-10-10",
"count": 1
},
{
"date": "2017-10-15",
"count": 1
},
{
"date": "2017-10-21",
"count": 1
},
{
"date": "2017-10-27",
"count": 1
},
{
"date": "2017-11-06",
"count": 1
},
{
"date": "2017-11-07",
"count": 1
},
{
"date": "2017-11-10",
"count": 1
},
{
"date": "2017-11-15",
"count": 1
},
{
"date": "2017-12-01",
"count": 1
},
{
"date": "2017-12-12",
"count": 1
},
{
"date": "2017-12-13",
"count": 1
},
{
"date": "2017-12-22",
"count": 1
},
{
"date": "2018-01-28",
"count": 1
},
{
"date": "2018-01-31",
"count": 1
},
{
"date": "2018-02-08",
"count": 1
},
{
"date": "2018-02-21",
"count": 1
},
{
"date": "2018-04-06",
"count": 1
},
{
"date": "2018-04-17",
"count": 1
},
{
"date": "2018-05-09",
"count": 1
},
{
"date": "2018-05-21",
"count": 2
},
{
"date": "2018-06-25",
"count": 1
},
{
"date": "2018-06-26",
"count": 1
},
{
"date": "2018-07-09",
"count": 1
},
{
"date": "2018-08-15",
"count": 1
},
{
"date": "2018-08-30",
"count": 1
},
{
"date": "2018-09-04",
"count": 1
},
{
"date": "2018-09-08",
"count": 1
},
{
"date": "2018-09-10",
"count": 1
},
{
"date": "2018-09-22",
"count": 1
},
{
"date": "2018-11-10",
"count": 1
},
{
"date": "2018-11-23",
"count": 1
},
{
"date": "2018-12-11",
"count": 1
},
{
"date": "2018-12-27",
"count": 1
},
{
"date": "2019-01-13",
"count": 1
},
{
"date": "2019-01-18",
"count": 1
},
{
"date": "2019-02-04",
"count": 1
},
{
"date": "2019-04-08",
"count": 1
},
{
"date": "2019-04-17",
"count": 1
},
{
"date": "2019-06-04",
"count": 1
},
{
"date": "2019-06-24",
"count": 1
},
{
"date": "2019-06-29",
"count": 1
},
{
"date": "2019-07-11",
"count": 1
},
{
"date": "2019-08-08",
"count": 1
},
{
"date": "2019-09-17",
"count": 2
},
{
"date": "2019-09-23",
"count": 1
},
{
"date": "2019-11-06",
"count": 1
},
{
"date": "2019-11-12",
"count": 1
},
{
"date": "2019-11-15",
"count": 1
},
{
"date": "2019-11-21",
"count": 1
},
{
"date": "2019-11-24",
"count": 1
},
{
"date": "2019-11-28",
"count": 1
},
{
"date": "2020-01-05",
"count": 1
},
{
"date": "2020-01-11",
"count": 1
},
{
"date": "2020-01-15",
"count": 1
},
{
"date": "2020-01-25",
"count": 1
},
{
"date": "2020-01-27",
"count": 1
},
{
"date": "2020-02-04",
"count": 1
},
{
"date": "2020-02-11",
"count": 1
},
{
"date": "2020-03-13",
"count": 1
},
{
"date": "2020-03-24",
"count": 1
},
{
"date": "2020-05-10",
"count": 1
},
{
"date": "2020-06-27",
"count": 1
},
{
"date": "2020-07-15",
"count": 1
},
{
"date": "2020-07-21",
"count": 1
},
{
"date": "2020-08-20",
"count": 1
},
{
"date": "2020-08-21",
"count": 1
},
{
"date": "2020-08-25",
"count": 1
},
{
"date": "2020-09-10",
"count": 1
},
{
"date": "2020-09-29",
"count": 1
},
{
"date": "2020-10-31",
"count": 1
},
{
"date": "2020-11-02",
"count": 1
},
{
"date": "2020-11-05",
"count": 1
},
{
"date": "2020-11-10",
"count": 1
},
{
"date": "2020-11-21",
"count": 1
},
{
"date": "2020-12-16",
"count": 1
},
{
"date": "2020-12-17",
"count": 1
},
{
"date": "2021-01-23",
"count": 1
},
{
"date": "2021-02-28",
"count": 1
},
{
"date": "2021-03-18",
"count": 1
},
{
"date": "2021-03-23",
"count": 1
},
{
"date": "2021-04-02",
"count": 1
},
{
"date": "2021-04-23",
"count": 1
},
{
"date": "2021-04-25",
"count": 1
},
{
"date": "2021-04-28",
"count": 1
},
{
"date": "2021-05-02",
"count": 1
},
{
"date": "2021-05-12",
"count": 1
},
{
"date": "2021-05-18",
"count": 1
},
{
"date": "2021-05-22",
"count": 1
},
{
"date": "2021-05-27",
"count": 1
},
{
"date": "2021-06-08",
"count": 1
},
{
"date": "2021-06-09",
"count": 1
},
{
"date": "2021-06-15",
"count": 1
},
{
"date": "2021-08-07",
"count": 1
},
{
"date": "2021-09-02",
"count": 1
},
{
"date": "2021-11-13",
"count": 1
},
{
"date": "2021-12-23",
"count": 1
},
{
"date": "2022-02-10",
"count": 1
},
{
"date": "2022-02-18",
"count": 1
},
{
"date": "2022-04-05",
"count": 1
},
{
"date": "2022-04-07",
"count": 1
},
{
"date": "2022-04-20",
"count": 1
},
{
"date": "2022-05-07",
"count": 1
},
{
"date": "2022-05-09",
"count": 1
},
{
"date": "2022-07-22",
"count": 1
},
{
"date": "2022-08-08",
"count": 1
},
{
"date": "2022-08-29",
"count": 1
},
{
"date": "2022-09-04",
"count": 1
},
{
"date": "2022-09-12",
"count": 1
},
{
"date": "2022-10-21",
"count": 1
},
{
"date": "2022-10-31",
"count": 1
},
{
"date": "2022-11-03",
"count": 1
},
{
"date": "2022-12-11",
"count": 1
},
{
"date": "2022-12-13",
"count": 1
},
{
"date": "2023-01-24",
"count": 1
},
{
"date": "2023-01-27",
"count": 1
},
{
"date": "2023-03-23",
"count": 1
},
{
"date": "2023-03-28",
"count": 1
},
{
"date": "2023-03-30",
"count": 1
},
{
"date": "2023-05-03",
"count": 1
},
{
"date": "2023-05-18",
"count": 1
},
{
"date": "2023-06-26",
"count": 1
},
{
"date": "2023-07-15",
"count": 1
},
{
"date": "2023-08-01",
"count": 1
},
{
"date": "2023-09-02",
"count": 1
},
{
"date": "2023-10-09",
"count": 1
},
{
"date": "2023-10-10",
"count": 1
},
{
"date": "2023-10-25",
"count": 1
},
{
"date": "2024-04-28",
"count": 1
},
{
"date": "2024-05-01",
"count": 1
},
{
"date": "2024-06-20",
"count": 1
},
{
"date": "2024-06-24",
"count": 1
},
{
"date": "2024-07-04",
"count": 1
},
{
"date": "2024-07-08",
"count": 1
},
{
"date": "2024-08-19",
"count": 1
},
{
"date": "2024-10-13",
"count": 1
},
{
"date": "2024-10-18",
"count": 1
},
{
"date": "2024-12-22",
"count": 1
},
{
"date": "2025-01-24",
"count": 1
},
{
"date": "2025-02-18",
"count": 1
},
{
"date": "2025-04-01",
"count": 1
},
{
"date": "2025-04-24",
"count": 1
},
{
"date": "2025-06-11",
"count": 1
},
{
"date": "2025-09-12",
"count": 1
},
{
"date": "2025-09-17",
"count": 1
},
{
"date": "2025-10-24",
"count": 1
},
{
"date": "2025-10-31",
"count": 1
},
{
"date": "2025-11-18",
"count": 1
},
{
"date": "2026-01-07",
"count": 1
},
{
"date": "2026-01-08",
"count": 1
},
{
"date": "2026-01-30",
"count": 1
},
{
"date": "2026-03-08",
"count": 1
},
{
"date": "2026-04-18",
"count": 1
},
{
"date": "2026-05-13",
"count": 1
},
{
"date": "2026-06-07",
"count": 1
}
],
"complete": true,
"collected": 199,
"total_forks": 199
},
"star_history": null,
"open_issues_and_prs": 3
},
"ai_readiness": {
"has_nix": false,
"example_dirs": [
"recipes"
],
"has_llms_txt": false,
"has_dockerfile": false,
"has_mcp_signal": false,
"bootstrap_files": [],
"api_schema_files": [],
"has_devcontainer": false,
"typecheck_configs": [],
"toolchain_manifests": [],
"largest_source_bytes": 19152,
"source_files_sampled": 786,
"oversized_source_files": 0,
"agent_instruction_files": [
"CLAUDE.md"
],
"agent_instruction_max_bytes": 3757
},
"dependencies": {
"manifests": [
"composer.json"
],
"advisories": {
"error": "No resolved dependencies carried a version and a supported ecosystem",
"scope": "repository_graph",
"source": null,
"findings": [],
"collected": false,
"malicious": [],
"truncated": false,
"by_severity": {},
"advisory_count": 0,
"affected_count": 0,
"assessed_count": 0,
"malicious_count": 0,
"assessed_package": null,
"unassessed_count": 14,
"direct_affected_count": 0
},
"ecosystems": [
"packagist"
],
"dependencies": [
{
"name": "nyholm/psr7",
"manifest": "composer.json",
"ecosystem": "packagist",
"version_constraint": "^1.8"
},
{
"name": "psr/http-client",
"manifest": "composer.json",
"ecosystem": "packagist",
"version_constraint": "^1.0"
},
{
"name": "psr/http-factory",
"manifest": "composer.json",
"ecosystem": "packagist",
"version_constraint": "^1.1"
},
{
"name": "psr/http-message",
"manifest": "composer.json",
"ecosystem": "packagist",
"version_constraint": "^1.1|^2.0"
}
],
"all_dependencies": {
"error": null,
"source": "github-sbom",
"packages": [
{
"name": "nyholm/psr7",
"direct": true,
"version": null,
"ecosystem": "packagist"
},
{
"name": "psr/http-client",
"direct": true,
"version": null,
"ecosystem": "packagist"
},
{
"name": "psr/http-factory",
"direct": true,
"version": null,
"ecosystem": "packagist"
},
{
"name": "psr/http-message",
"direct": true,
"version": null,
"ecosystem": "packagist"
},
{
"name": "brianium/paratest",
"direct": false,
"version": null,
"ecosystem": "packagist"
},
{
"name": "composer/ca-bundle",
"direct": false,
"version": null,
"ecosystem": "packagist"
},
{
"name": "ext-curl",
"direct": false,
"version": null,
"ecosystem": "packagist"
},
{
"name": "ext-json",
"direct": false,
"version": null,
"ecosystem": "packagist"
},
{
"name": "ext-openssl",
"direct": false,
"version": null,
"ecosystem": "packagist"
},
{
"name": "guzzlehttp/guzzle",
"direct": false,
"version": null,
"ecosystem": "packagist"
},
{
"name": "php",
"direct": false,
"version": null,
"ecosystem": "packagist"
},
{
"name": "phpstan/phpstan",
"direct": false,
"version": null,
"ecosystem": "packagist"
},
{
"name": "phpunit/phpunit",
"direct": false,
"version": null,
"ecosystem": "packagist"
},
{
"name": "symfony/var-dumper",
"direct": false,
"version": null,
"ecosystem": "packagist"
}
],
"collected": true,
"truncated": false,
"total_count": 14,
"direct_count": 4,
"indirect_count": 10
}
},
"maintainership": {
"issues": {
"open_prs": 1,
"merged_prs": 443,
"open_issues": 2,
"closed_ratio": 0.995,
"closed_issues": 396,
"closed_unmerged_prs": 52
},
"bus_factor": 2,
"bot_contributors": 0,
"top_contributors": [
{
"type": "User",
"login": "Naoray",
"commits": 731,
"avatar_url": "https://avatars.githubusercontent.com/u/10154100?v=4"
},
{
"type": "User",
"login": "sandervanhooft",
"commits": 678,
"avatar_url": "https://avatars.githubusercontent.com/u/7265703?v=4"
},
{
"type": "User",
"login": "ciungulete",
"commits": 120,
"avatar_url": "https://avatars.githubusercontent.com/u/742128?v=4"
},
{
"type": "User",
"login": "ndijkstra",
"commits": 45,
"avatar_url": "https://avatars.githubusercontent.com/u/3372841?v=4"
},
{
"type": "User",
"login": "mollierobbert",
"commits": 22,
"avatar_url": "https://avatars.githubusercontent.com/u/6184158?v=4"
},
{
"type": "User",
"login": "kloentje2",
"commits": 21,
"avatar_url": "https://avatars.githubusercontent.com/u/4500111?v=4"
},
{
"type": "User",
"login": "lvgunst",
"commits": 21,
"avatar_url": "https://avatars.githubusercontent.com/u/130915?v=4"
},
{
"type": "User",
"login": "RickWong",
"commits": 17,
"avatar_url": "https://avatars.githubusercontent.com/u/40102?v=4"
},
{
"type": "User",
"login": "Thijs-Riezebeek",
"commits": 14,
"avatar_url": "https://avatars.githubusercontent.com/u/14027813?v=4"
},
{
"type": "User",
"login": "shirshir",
"commits": 14,
"avatar_url": "https://avatars.githubusercontent.com/u/660457?v=4"
}
],
"contributors_sampled": 94,
"top_contributor_share": 0.388
},
"quality_signals": {
"has_ci": true,
"has_tests": true,
"ci_workflows": [
"create_scoped_zip.yml",
"fix-codestyle.yml",
"phpstan.yml",
"tests.yml",
"update-changelog.yml"
],
"has_docs_dir": true,
"linter_configs": [
".php-cs-fixer.dist.php",
"phpstan.neon"
],
"has_editorconfig": false,
"has_linter_config": true,
"has_precommit_config": false
},
"security_signals": {
"lockfiles": [],
"scorecard": {
"checks": [
{
"name": "Binary-Artifacts",
"score": 10,
"reason": "no binaries found in the repo",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#binary-artifacts"
},
{
"name": "Branch-Protection",
"score": 0,
"reason": "branch protection not enabled on development/release branches",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#branch-protection"
},
{
"name": "CI-Tests",
"score": 10,
"reason": "10 out of 10 merged PRs checked by a CI test -- score normalized to 10",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#ci-tests"
},
{
"name": "CII-Best-Practices",
"score": 0,
"reason": "no effort to earn an OpenSSF best practices badge detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#cii-best-practices"
},
{
"name": "Code-Review",
"score": 6,
"reason": "Found 7/11 approved changesets -- score normalized to 6",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#code-review"
},
{
"name": "Contributors",
"score": 10,
"reason": "project has 14 contributing companies or organizations",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#contributors"
},
{
"name": "Dangerous-Workflow",
"score": null,
"reason": "no workflows found",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#dangerous-workflow"
},
{
"name": "Dependency-Update-Tool",
"score": 0,
"reason": "no update tool detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#dependency-update-tool"
},
{
"name": "Fuzzing",
"score": 0,
"reason": "project is not fuzzed",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#fuzzing"
},
{
"name": "License",
"score": 10,
"reason": "license file detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#license"
},
{
"name": "Maintained",
"score": 10,
"reason": "30 commit(s) and 1 issue activity found in the last 90 days -- score normalized to 10",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#maintained"
},
{
"name": "Packaging",
"score": null,
"reason": "packaging workflow not detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#packaging"
},
{
"name": "Pinned-Dependencies",
"score": null,
"reason": "no dependencies found",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#pinned-dependencies"
},
{
"name": "SAST",
"score": 0,
"reason": "SAST tool is not run on all commits -- score normalized to 0",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#sast"
},
{
"name": "Security-Policy",
"score": 9,
"reason": "security policy file detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#security-policy"
},
{
"name": "Signed-Releases",
"score": 0,
"reason": "Project has not signed or included provenance with any releases.",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#signed-releases"
},
{
"name": "Token-Permissions",
"score": null,
"reason": "No tokens found",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#token-permissions"
},
{
"name": "Vulnerabilities",
"score": 10,
"reason": "0 existing vulnerabilities detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#vulnerabilities"
}
],
"commit": "255aac7cb9284f8ed472fd522ed6e4235131b671",
"ran_at": "2026-08-05T09:23:11Z",
"aggregate_score": 5,
"scorecard_version": "v5.5.0"
},
"has_codeql_workflow": false,
"has_security_policy": false,
"has_dependabot_config": false
},
"contribution_flow": {
"collected": true,
"recent_prs": {
"merged_7d": 1,
"decided_7d": 1,
"merged_30d": 1,
"authors_30d": 1,
"decided_30d": 1,
"sample_size": 60,
"window_days": 30,
"sample_exhausted": false,
"authors_probed_30d": 1,
"newcomer_merged_30d": 0,
"bot_prs_excluded_30d": 0,
"newcomer_authors_30d": 0,
"newcomer_decided_30d": 0
},
"ci_last_run_at": null,
"oldest_open_prs": [
{
"number": 901,
"created_at": "2026-06-10T15:28:09Z",
"last_comment_at": null,
"last_comment_author": null
}
],
"last_merged_pr_at": "2026-08-05T08:05:36Z",
"ci_last_conclusion": null,
"oldest_open_issues": [
{
"number": 875,
"created_at": "2026-03-27T15:18:28Z",
"last_comment_at": "2026-04-03T09:27:14Z",
"last_comment_author": "Naoray"
},
{
"number": 876,
"created_at": "2026-03-27T15:32:23Z",
"last_comment_at": "2026-04-03T09:53:34Z",
"last_comment_author": "Naoray"
}
]
}
},
"config": {
"disabled_metrics": [],
"disabled_categories": [],
"disabled_components": {}
},
"source": {
"url": "https://github.com/mollie/mollie-api-php",
"host": "github.com",
"name": "mollie-api-php",
"owner": "mollie"
},
"metrics": {
"overall": {
"key": "overall",
"band": "excellent",
"name": "Overall health",
"note": "The weighted overall 75 is calibrated to 89 on the published index scale (record calibration 2026-08-02).",
"notes": [
{
"code": "overall_calibration",
"params": {
"raw": 75,
"calibrated": 89,
"calibration": "2026-08-02"
}
}
],
"value": 89,
"inputs": {
"security": 50,
"vitality": 88,
"community": 72,
"governance": 79,
"calibration": "2026-08-02",
"engineering": 82,
"ai_readiness": 59,
"weighted_overall_raw": 75
},
"components": []
},
"categories": [
{
"key": "vitality",
"band": "excellent",
"name": "Vitality",
"value": 88,
"weight": 0.21,
"metrics": [
{
"key": "development_activity",
"band": "excellent",
"name": "Development activity",
"note": null,
"notes": [],
"value": 86,
"inputs": {
"commits_last_year": 271,
"human_commit_share": 1,
"days_since_last_push": 0,
"active_weeks_last_year": 32
},
"components": [
{
"key": "push_recency",
"name": "Push recency",
"detail": "last push 0 days ago",
"points": 36,
"status": "met",
"details": [
{
"code": "push_recency",
"params": {
"days": 0
}
}
],
"max_points": 36
},
{
"key": "commit_cadence",
"name": "Commit cadence",
"detail": "32/52 weeks with commits",
"points": 22.2,
"status": "partial",
"details": [
{
"code": "commit_cadence_weeks",
"params": {
"weeks": 32
}
}
],
"max_points": 36
},
{
"key": "commit_volume",
"name": "Commit volume",
"detail": "271 commits in the last year",
"points": 18,
"status": "met",
"details": [
{
"code": "commits_last_year",
"params": {
"count": 271
}
}
],
"max_points": 18
},
{
"key": "openssf_scorecard_maintained",
"name": "OpenSSF Scorecard: Maintained",
"detail": "30 commit(s) and 1 issue activity found in the last 90 days -- score normalized to 10",
"points": 10,
"status": "met",
"details": [],
"max_points": 10
}
]
},
{
"key": "release_discipline",
"band": "excellent",
"name": "Release discipline",
"note": null,
"notes": [],
"value": 90,
"inputs": {
"releases_count": 100,
"latest_release_tag": "v3.13.1",
"releases_from_tags": false,
"days_since_latest_release": 57,
"mean_days_between_releases": 24.8
},
"components": [
{
"key": "ships_releases",
"name": "Ships releases",
"detail": "100 releases published",
"points": 27,
"status": "met",
"details": [
{
"code": "releases_published",
"params": {
"count": 100
}
}
],
"max_points": 27
},
{
"key": "release_recency",
"name": "Release recency",
"detail": "latest release 57 days ago",
"points": 36,
"status": "met",
"details": [
{
"code": "release_recency",
"params": {
"days": 57
}
}
],
"max_points": 36
},
{
"key": "release_cadence",
"name": "Release cadence",
"detail": "a release every ~24.8 days",
"points": 27,
"status": "met",
"details": [
{
"code": "release_cadence",
"params": {
"gap": 24.8
}
}
],
"max_points": 27
},
{
"key": "openssf_scorecard_signed_releases",
"name": "OpenSSF Scorecard: Signed-Releases",
"detail": "Project has not signed or included provenance with any releases.",
"points": 0,
"status": "missed",
"details": [],
"max_points": 10
}
]
},
{
"key": "abandonment",
"band": "exceptional",
"name": "Abandonment",
"note": null,
"notes": [],
"value": 100,
"inputs": {
"cap": null,
"state": "maintained",
"guards": [],
"signals": [],
"red_flag": false,
"multiplier_pct": 100,
"declared_reason": null,
"unverified_reason": null,
"unanswered_open_prs": null,
"unanswered_open_issues": null,
"days_since_last_merged_pr": null,
"days_since_last_human_commit": 0,
"days_since_last_human_commit_is_floor": false
},
"components": [
{
"key": "project_is_still_maintained",
"name": "Project is still maintained",
"detail": "last human commit 0 days ago",
"points": 100,
"status": "met",
"details": [
{
"code": "abandonment_maintained",
"params": {
"days": 0
}
}
],
"max_points": 100
}
]
}
],
"description": "Is the project alive — is code being written and are releases shipping?"
},
{
"key": "community",
"band": "good",
"name": "Community & Adoption",
"value": 72,
"weight": 0.17,
"metrics": [
{
"key": "popularity",
"band": "good",
"name": "Popularity & adoption",
"note": null,
"notes": [],
"value": 74,
"inputs": {
"forks": 199,
"stars": 602,
"watchers": 61,
"growth_state": "unverified",
"growth_factor_pct": 100,
"growth_unverified_reason": "no_history"
},
"components": [
{
"key": "stars",
"name": "Stars",
"detail": "602 stars",
"points": 45.1,
"status": "partial",
"details": [
{
"code": "stars",
"params": {
"count": 602
}
}
],
"max_points": 60
},
{
"key": "forks",
"name": "Forks",
"detail": "199 forks",
"points": 19.1,
"status": "partial",
"details": [
{
"code": "forks",
"params": {
"count": 199
}
}
],
"max_points": 25
},
{
"key": "watchers",
"name": "Watchers",
"detail": "61 watchers",
"points": 9.9,
"status": "partial",
"details": [
{
"code": "watchers",
"params": {
"count": 61
}
}
],
"max_points": 15
}
]
},
{
"key": "community_health",
"band": "moderate",
"name": "Community health",
"note": null,
"notes": [],
"value": 58,
"inputs": {
"has_readme": true,
"has_license": true,
"readme_badges": 4,
"has_contributing": false,
"has_issue_template": true,
"has_code_of_conduct": false,
"readme_badge_services": [
"github.com",
"poser.pugx.org",
"shields.io"
],
"has_pull_request_template": false
},
"components": [
{
"key": "readme",
"name": "README",
"detail": null,
"points": 22.5,
"status": "met",
"details": [],
"max_points": 22.5
},
{
"key": "license",
"name": "License",
"detail": "recognized license (BSD-2-Clause)",
"points": 22.5,
"status": "met",
"details": [
{
"code": "license_standard",
"params": {}
},
{
"code": "license_spdx",
"params": {
"spdx": "BSD-2-Clause"
}
}
],
"max_points": 22.5
},
{
"key": "contributing_guide",
"name": "CONTRIBUTING guide",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 18
},
{
"key": "code_of_conduct",
"name": "Code of conduct",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 13.5
},
{
"key": "issue_template",
"name": "Issue template",
"detail": null,
"points": 7.2,
"status": "met",
"details": [],
"max_points": 7.2
},
{
"key": "pr_template",
"name": "PR template",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 6.3
}
]
},
{
"key": "ecosystem_adoption",
"band": "excellent",
"name": "Ecosystem adoption (downloads)",
"note": null,
"notes": [],
"value": 89,
"inputs": {
"packages": [
"mollie/mollie-api-php"
],
"dependents": 67,
"ecosystems": "packagist",
"total_downloads": 16681513,
"monthly_downloads": 566919
},
"components": [
{
"key": "monthly_downloads",
"name": "Monthly downloads",
"detail": "566,919 downloads/month across packagist",
"points": 76.7,
"status": "partial",
"details": [
{
"code": "downloads_monthly",
"params": {
"count": 566919,
"ecosystems": "packagist"
}
}
],
"max_points": 80
},
{
"key": "registry_dependents",
"name": "Registry dependents",
"detail": "67 packages depend on it",
"points": 12.2,
"status": "partial",
"details": [
{
"code": "registry_dependents",
"params": {
"count": 67
}
}
],
"max_points": 20
}
]
}
],
"description": "Does the project have users, downloads, attention, and a welcoming setup for contributors?"
},
{
"key": "governance",
"band": "good",
"name": "Sustainability & Governance",
"value": 79,
"weight": 0.23,
"metrics": [
{
"key": "maintainer_resilience",
"band": "moderate",
"name": "Maintainer resilience (bus factor)",
"note": null,
"notes": [],
"value": 62,
"inputs": {
"bus_factor": 2,
"contributors_sampled": 94,
"top_contributor_share": 0.388
},
"components": [
{
"key": "bus_factor",
"name": "Bus factor",
"detail": "2 contributor(s) cover half of all commits",
"points": 25.2,
"status": "partial",
"details": [
{
"code": "bus_factor",
"params": {
"count": 2
}
}
],
"max_points": 54
},
{
"key": "commit_distribution",
"name": "Commit distribution",
"detail": "top contributor authored 39% of commits",
"points": 13.8,
"status": "partial",
"details": [
{
"code": "top_contributor_share",
"params": {
"share": 39
}
}
],
"max_points": 22.5
},
{
"key": "contributor_breadth",
"name": "Contributor breadth",
"detail": "94 contributors",
"points": 13.5,
"status": "met",
"details": [
{
"code": "contributors_sampled",
"params": {
"count": 94
}
}
],
"max_points": 13.5
},
{
"key": "openssf_scorecard_contributors",
"name": "OpenSSF Scorecard: Contributors",
"detail": "project has 14 contributing companies or organizations",
"points": 10,
"status": "met",
"details": [],
"max_points": 10
}
]
},
{
"key": "responsiveness",
"band": "excellent",
"name": "Issue & PR responsiveness",
"note": "Excluded from scoring (no data or not applicable): Newcomer PR acceptance. Remaining weights renormalized.",
"notes": [
{
"code": "excluded_no_data",
"params": {
"components": [
"newcomer_pr_acceptance"
]
}
},
{
"code": "weights_renormalized",
"params": {}
}
],
"value": 89,
"inputs": {
"merged_prs": 443,
"open_issues": 2,
"closed_issues": 396,
"prs_merged_7d": 1,
"prs_decided_7d": 1,
"prs_merged_30d": 1,
"prs_decided_30d": 1,
"issue_closed_ratio": 0.995,
"closed_unmerged_prs": 52,
"first_time_authors_30d": 0,
"first_time_prs_merged_30d": 0,
"first_time_prs_decided_30d": 0
},
"components": [
{
"key": "issue_resolution",
"name": "Issue resolution",
"detail": "100% of issues closed",
"points": 41.8,
"status": "partial",
"details": [
{
"code": "issues_closed_share",
"params": {
"share": 100
}
}
],
"max_points": 42
},
{
"key": "pr_acceptance",
"name": "PR acceptance",
"detail": "443/495 decided PRs merged",
"points": 26.8,
"status": "partial",
"details": [
{
"code": "decided_prs_merged",
"params": {
"merged": 443,
"decided": 495
}
}
],
"max_points": 30
},
{
"key": "newcomer_pr_acceptance",
"name": "Newcomer PR acceptance",
"detail": "no first-time contributor's PR decided in 30d",
"points": 0,
"status": "excluded",
"details": [
{
"code": "no_newcomer_prs",
"params": {
"days": 30
}
}
],
"max_points": 13
},
{
"key": "openssf_scorecard_code_review",
"name": "OpenSSF Scorecard: Code-Review",
"detail": "Found 7/11 approved changesets -- score normalized to 6",
"points": 9,
"status": "partial",
"details": [],
"max_points": 15
}
]
},
{
"key": "stewardship",
"band": "good",
"name": "Ownership & stewardship",
"note": null,
"notes": [],
"value": 72,
"inputs": {
"followers": 194,
"owner_type": "Organization",
"is_verified": null,
"owner_login": "mollie",
"public_repos": 86,
"account_age_days": 5318
},
"components": [
{
"key": "ownership_backing",
"name": "Ownership backing",
"detail": "organization-owned",
"points": 30,
"status": "met",
"details": [
{
"code": "owner_organization",
"params": {}
}
],
"max_points": 30
},
{
"key": "verified_domain",
"name": "Verified domain",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 20
},
{
"key": "owner_reach",
"name": "Owner reach",
"detail": "194 followers of mollie",
"points": 16.5,
"status": "partial",
"details": [
{
"code": "owner_followers",
"params": {
"count": 194,
"login": "mollie"
}
}
],
"max_points": 25
},
{
"key": "track_record",
"name": "Track record",
"detail": "86 public repos, account ~14 yr old",
"points": 25,
"status": "met",
"details": [
{
"code": "public_repos",
"params": {
"count": 86
}
},
{
"code": "account_age_years",
"params": {
"years": 14
}
}
],
"max_points": 25
}
]
},
{
"key": "package_maintenance",
"band": "exceptional",
"name": "Package maintenance",
"note": null,
"notes": [],
"value": 100,
"inputs": {
"packages": [
"mollie/mollie-api-php"
],
"ecosystems": "packagist",
"any_deprecated": false,
"min_days_since_publish": 57
},
"components": [
{
"key": "published_resolvable",
"name": "Published & resolvable",
"detail": "1 package(s) on packagist",
"points": 25,
"status": "met",
"details": [
{
"code": "packages_published",
"params": {
"count": 1,
"ecosystems": "packagist"
}
}
],
"max_points": 25
},
{
"key": "publish_recency",
"name": "Publish recency",
"detail": "latest publish 57 days ago",
"points": 35,
"status": "met",
"details": [
{
"code": "publish_recency",
"params": {
"days": 57
}
}
],
"max_points": 35
},
{
"key": "version_history",
"name": "Version history",
"detail": "236 published versions",
"points": 20,
"status": "met",
"details": [
{
"code": "published_versions",
"params": {
"count": 236
}
}
],
"max_points": 20
},
{
"key": "not_deprecated",
"name": "Not deprecated",
"detail": "active, not deprecated or yanked",
"points": 20,
"status": "met",
"details": [
{
"code": "package_not_deprecated",
"params": {}
}
],
"max_points": 20
}
]
}
],
"description": "Will the project survive its people — bus factor, responsiveness, who backs it, and package upkeep?"
},
{
"key": "engineering",
"band": "excellent",
"name": "Engineering Quality",
"value": 82,
"weight": 0.19,
"metrics": [
{
"key": "engineering_practices",
"band": "excellent",
"name": "Engineering practices",
"note": null,
"notes": [],
"value": 84,
"inputs": {
"has_ci": true,
"has_tests": true,
"has_editorconfig": false,
"has_linter_config": true,
"has_precommit_config": false
},
"components": [
{
"key": "ci_workflows",
"name": "CI workflows",
"detail": "5 workflow(s)",
"points": 24,
"status": "met",
"details": [
{
"code": "ci_workflows",
"params": {
"count": 5
}
}
],
"max_points": 24
},
{
"key": "tests_present",
"name": "Tests present",
"detail": null,
"points": 24,
"status": "met",
"details": [],
"max_points": 24
},
{
"key": "linter_config",
"name": "Linter config",
"detail": ".php-cs-fixer.dist.php, phpstan.neon",
"points": 16,
"status": "met",
"details": [
{
"code": "file_list",
"params": {
"files": ".php-cs-fixer.dist.php, phpstan.neon"
}
}
],
"max_points": 16
},
{
"key": "pre_commit_hooks",
"name": "Pre-commit hooks",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 9.6
},
{
"key": "editorconfig",
"name": ".editorconfig",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 6.4
},
{
"key": "openssf_scorecard_ci_tests",
"name": "OpenSSF Scorecard: CI-Tests",
"detail": "10 out of 10 merged PRs checked by a CI test -- score normalized to 10",
"points": 20,
"status": "met",
"details": [],
"max_points": 20
}
]
},
{
"key": "documentation",
"band": "excellent",
"name": "Documentation",
"note": null,
"notes": [],
"value": 80,
"inputs": {
"topics": [],
"has_wiki": false,
"homepage": "http://www.mollie.com",
"has_readme": true,
"has_docs_dir": true,
"has_description": true
},
"components": [
{
"key": "readme",
"name": "README",
"detail": null,
"points": 30,
"status": "met",
"details": [],
"max_points": 30
},
{
"key": "documentation_directory",
"name": "Documentation directory",
"detail": null,
"points": 25,
"status": "met",
"details": [],
"max_points": 25
},
{
"key": "documentation_homepage_site",
"name": "Documentation / homepage site",
"detail": "http://www.mollie.com",
"points": 15,
"status": "met",
"details": [],
"max_points": 15
},
{
"key": "repository_description",
"name": "Repository description",
"detail": null,
"points": 10,
"status": "met",
"details": [],
"max_points": 10
},
{
"key": "topics",
"name": "Topics",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 10
},
{
"key": "wiki",
"name": "Wiki",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 10
}
]
}
],
"description": "Are baseline engineering and documentation practices in place?"
},
{
"key": "security",
"band": "moderate",
"name": "Security",
"value": 50,
"weight": 0.16,
"metrics": [
{
"key": "security_posture",
"band": "moderate",
"name": "Security posture",
"note": "Excluded from scoring (no data or not applicable): Dangerous-Workflow, Packaging, Pinned-Dependencies, Token-Permissions. Remaining weights renormalized.",
"notes": [
{
"code": "excluded_no_data",
"params": {
"components": [
"dangerous_workflow",
"packaging",
"pinned_dependencies",
"token_permissions"
]
}
},
{
"code": "weights_renormalized",
"params": {}
}
],
"value": 50,
"inputs": {
"source": "openssf_scorecard",
"checks_evaluated": 14,
"scorecard_version": "v5.5.0",
"checks_inconclusive": 4,
"scorecard_aggregate": 5
},
"components": [
{
"key": "binary_artifacts",
"name": "Binary-Artifacts",
"detail": "no binaries found in the repo",
"points": 7.5,
"status": "met",
"details": [],
"max_points": 7.5
},
{
"key": "branch_protection",
"name": "Branch-Protection",
"detail": "branch protection not enabled on development/release branches",
"points": 0,
"status": "missed",
"details": [],
"max_points": 7.5
},
{
"key": "ci_tests",
"name": "CI-Tests",
"detail": "10 out of 10 merged PRs checked by a CI test -- score normalized to 10",
"points": 2.5,
"status": "met",
"details": [],
"max_points": 2.5
},
{
"key": "cii_best_practices",
"name": "CII-Best-Practices",
"detail": "no effort to earn an OpenSSF best practices badge detected",
"points": 0,
"status": "missed",
"details": [],
"max_points": 2.5
},
{
"key": "code_review",
"name": "Code-Review",
"detail": "Found 7/11 approved changesets -- score normalized to 6",
"points": 4.5,
"status": "partial",
"details": [],
"max_points": 7.5
},
{
"key": "contributors",
"name": "Contributors",
"detail": "project has 14 contributing companies or organizations",
"points": 2.5,
"status": "met",
"details": [],
"max_points": 2.5
},
{
"key": "dangerous_workflow",
"name": "Dangerous-Workflow",
"detail": "no workflows found",
"points": 0,
"status": "excluded",
"details": [
{
"code": "no_data",
"params": {}
}
],
"max_points": 10
},
{
"key": "dependency_update_tool",
"name": "Dependency-Update-Tool",
"detail": "no update tool detected",
"points": 0,
"status": "missed",
"details": [],
"max_points": 7.5
},
{
"key": "fuzzing",
"name": "Fuzzing",
"detail": "project is not fuzzed",
"points": 0,
"status": "missed",
"details": [],
"max_points": 5
},
{
"key": "license",
"name": "License",
"detail": "license file detected",
"points": 2.5,
"status": "met",
"details": [],
"max_points": 2.5
},
{
"key": "maintained",
"name": "Maintained",
"detail": "30 commit(s) and 1 issue activity found in the last 90 days -- score normalized to 10",
"points": 7.5,
"status": "met",
"details": [],
"max_points": 7.5
},
{
"key": "packaging",
"name": "Packaging",
"detail": "packaging workflow not detected",
"points": 0,
"status": "excluded",
"details": [
{
"code": "no_data",
"params": {}
}
],
"max_points": 5
},
{
"key": "pinned_dependencies",
"name": "Pinned-Dependencies",
"detail": "no dependencies found",
"points": 0,
"status": "excluded",
"details": [
{
"code": "no_data",
"params": {}
}
],
"max_points": 5
},
{
"key": "sast",
"name": "SAST",
"detail": "SAST tool is not run on all commits -- score normalized to 0",
"points": 0,
"status": "missed",
"details": [],
"max_points": 5
},
{
"key": "security_policy",
"name": "Security-Policy",
"detail": "security policy file detected",
"points": 4.5,
"status": "partial",
"details": [],
"max_points": 5
},
{
"key": "signed_releases",
"name": "Signed-Releases",
"detail": "Project has not signed or included provenance with any releases.",
"points": 0,
"status": "missed",
"details": [],
"max_points": 7.5
},
{
"key": "token_permissions",
"name": "Token-Permissions",
"detail": "No tokens found",
"points": 0,
"status": "excluded",
"details": [
{
"code": "no_data",
"params": {}
}
],
"max_points": 7.5
},
{
"key": "vulnerabilities",
"name": "Vulnerabilities",
"detail": "0 existing vulnerabilities detected",
"points": 7.5,
"status": "met",
"details": [],
"max_points": 7.5
}
]
},
{
"key": "high_risk_jurisdiction_exposure",
"band": "exceptional",
"name": "High-Risk Jurisdiction Exposure",
"note": "Only high-confidence self-published location evidence affects this multiplier. Ambiguous matches are review-only; country evidence is not proof of nationality, citizenship, legal registration, malicious intent, or sanctions status.",
"notes": [
{
"code": "jurisdiction_evidence_limits",
"params": {}
}
],
"value": 100,
"inputs": {
"meaning": "self-published location evidence; not nationality or citizenship",
"red_flag": false,
"exposures": [],
"policy_countries": [
"Russia",
"Iran",
"North Korea"
],
"commit_weight_rule": {
"min_commits": 50,
"min_commit_share": 0.1
},
"review_only_matches": 0,
"below_threshold_exposures": [],
"assessed_self_published_locations": 12
},
"components": [
{
"key": "policy_exposure_multiplier",
"name": "Policy exposure multiplier",
"detail": "no confirmed policy-scope location match",
"points": 100,
"status": "met",
"details": [
{
"code": "jurisdiction_no_match",
"params": {}
}
],
"max_points": 100
}
]
}
],
"description": "Are visible security and supply-chain practices strong, with no malicious dependency and no unresolved high-risk jurisdiction exposure?"
},
{
"key": "ai_readiness",
"band": "moderate",
"name": "AI Readiness",
"value": 59,
"weight": 0.04,
"metrics": [
{
"key": "ai_agent_context",
"band": "excellent",
"name": "Agent context & guidance",
"note": null,
"notes": [],
"value": 84,
"inputs": {
"has_llms_txt": false,
"legible_history_share": 0.74,
"agent_instruction_files": [
"CLAUDE.md"
],
"agent_instruction_max_bytes": 3757
},
"components": [
{
"key": "agent_instructions",
"name": "Agent instructions",
"detail": "CLAUDE.md",
"points": 45,
"status": "met",
"details": [
{
"code": "file_list",
"params": {
"files": "CLAUDE.md"
}
}
],
"max_points": 45
},
{
"key": "machine_readable_docs_llms_txt",
"name": "Machine-readable docs (llms.txt)",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 15
},
{
"key": "legible_commit_history",
"name": "Legible commit history",
"detail": "74 of 100 human commits state their intent (structured subject or explanatory body)",
"points": 39.5,
"status": "partial",
"details": [
{
"code": "legible_history",
"params": {
"legible": 74,
"sampled": 100
}
}
],
"max_points": 40
}
]
},
{
"key": "ai_verify_loop",
"band": "weak",
"name": "Verify loop (build / test / typecheck)",
"note": "Excluded from scoring (no data or not applicable): OpenSSF Scorecard: Pinned-Dependencies. Remaining weights renormalized.",
"notes": [
{
"code": "excluded_no_data",
"params": {
"components": [
"openssf_scorecard_pinned_dependencies"
]
}
},
{
"code": "weights_renormalized",
"params": {}
}
],
"value": 48,
"inputs": {
"has_nix": false,
"has_tests": true,
"lockfiles": [],
"has_dockerfile": false,
"typed_language": false,
"bootstrap_files": [],
"has_devcontainer": false,
"has_linter_config": true,
"typecheck_configs": [],
"agent_commit_share": 0.35,
"toolchain_manifests": [],
"dependency_bot_commit_share": 0
},
"components": [
{
"key": "one_command_bootstrap",
"name": "One-command bootstrap",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 18
},
{
"key": "automated_tests",
"name": "Automated tests",
"detail": null,
"points": 22,
"status": "met",
"details": [],
"max_points": 22
},
{
"key": "lint_format_config",
"name": "Lint / format config",
"detail": ".php-cs-fixer.dist.php, phpstan.neon",
"points": 11,
"status": "met",
"details": [
{
"code": "file_list",
"params": {
"files": ".php-cs-fixer.dist.php, phpstan.neon"
}
}
],
"max_points": 11
},
{
"key": "static_type_checking",
"name": "Static type checking",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 11
},
{
"key": "reproducible_environment",
"name": "Reproducible environment",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 10
},
{
"key": "demonstrated_agent_practice",
"name": "Demonstrated agent practice",
"detail": "35 of the last 100 commits agent-authored or agent-credited",
"points": 10,
"status": "met",
"details": [
{
"code": "agent_authored_commits",
"params": {
"count": 35,
"sampled": 100
}
}
],
"max_points": 10
},
{
"key": "automated_maintenance",
"name": "Automated maintenance",
"detail": "no automated dependency updates observed",
"points": 0,
"status": "missed",
"details": [
{
"code": "no_dependency_automation",
"params": {}
}
],
"max_points": 8
},
{
"key": "openssf_scorecard_pinned_dependencies",
"name": "OpenSSF Scorecard: Pinned-Dependencies",
"detail": "no dependencies found",
"points": 0,
"status": "excluded",
"details": [
{
"code": "no_data",
"params": {}
}
],
"max_points": 10
}
]
},
{
"key": "ai_code_legibility",
"band": "moderate",
"name": "Code legibility for models",
"note": null,
"notes": [],
"value": 55,
"inputs": {
"primary_language": "PHP",
"largest_source_bytes": 19152,
"source_files_sampled": 786,
"oversized_source_files": 0
},
"components": [
{
"key": "type_checkable_code",
"name": "Type-checkable code",
"detail": "PHP without a type-check config",
"points": 0,
"status": "missed",
"details": [
{
"code": "no_typecheck_config_language",
"params": {
"language": "PHP"
}
}
],
"max_points": 45
},
{
"key": "manageable_file_sizes",
"name": "Manageable file sizes",
"detail": "0/786 source files over 60KB",
"points": 55,
"status": "met",
"details": [
{
"code": "oversized_source_files",
"params": {
"kb": 60,
"sampled": 786,
"oversized": 0
}
}
],
"max_points": 55
}
]
},
{
"key": "ai_interfaces",
"band": "weak",
"name": "Machine-readable interfaces",
"note": null,
"notes": [],
"value": 40,
"inputs": {
"example_dirs": [
"recipes"
],
"has_mcp_signal": false,
"api_schema_files": []
},
"components": [
{
"key": "api_schema_openapi_graphql_proto",
"name": "API schema (OpenAPI/GraphQL/proto)",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 40
},
{
"key": "mcp_server",
"name": "MCP server",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 20
},
{
"key": "runnable_examples",
"name": "Runnable examples",
"detail": "recipes",
"points": 40,
"status": "met",
"details": [
{
"code": "file_list",
"params": {
"files": "recipes"
}
}
],
"max_points": 40
}
]
}
],
"description": "How well is the repo equipped to be developed and maintained with AI coding agents? Carries a deliberately small weight: agent tooling is a real maintenance signal, but its absence must never gate the top of the scale (calibration saturates at raw 91, so 100/100 remains reachable with AI Readiness at zero)."
}
],
"classification": {
"top": [
"library"
],
"labels": [
"library"
],
"scores": {
"library": 12
},
"primary": "library",
"evidence": [
{
"tier": "distribution",
"label": "library",
"source": "registry:packagist",
"weight": 6
},
{
"tier": "distribution",
"label": "library",
"source": "registry_type:library",
"weight": 6
}
],
"artifacts": [],
"confidence": "medium",
"host_extension": false,
"runs_as_process": false,
"consumed_by_code": true
},
"metrics_version": "2.5.0"
},
"warnings": [
"Star history unavailable: GitHub GraphQL error: Resource not accessible by personal access token",
"No resolved dependencies carried a version and a supported ecosystem"
],
"report_type": "repository",
"generated_at": "2026-08-05T09:23:40.416685Z",
"schema_version": "0.31.0",
"badge_url": "https://raw.githubusercontent.com/inspect-software/badges/main/v1/m/mollie/mollie-api-php.svg",
"full_name": "mollie/mollie-api-php",
"license_state": "standard",
"license_spdx": "BSD-2-Clause"
}Scores are signals, not warranties. They reflect publicly visible practices on GitHub — not a code audit, and not a security guarantee.
Missing data is excluded and weights renormalized, never scored as zero. Methodology is versioned and open: metrics v2.5.0, schema v0.31.0 — full methodology · metrics wiki.
How one result sits in the wider record: aggregate statistics — Packagist.