A suite of tools for integrating Braintree in the browser
78%
Total Score
healthy
Long release history and current publishing support health, but recent repository activity is concentrated and most workflow actions are unpinned.
One contributor made all commits in the last 3 months. The organization-owned repository provides some handoff capacity, but the observed recent activity is still highly concentrated.
Only 1 commit was recorded in the last 3 months, indicating very limited recent source activity despite the current registry release cadence. This lowers maintenance confidence but is not enough to imply abandonment on its own.
The package provides no type declarations, which is a real integration gap for TypeScript consumers, although it does not by itself indicate abandonment or unsafe maintenance.
Both workflows were analyzed with no audit findings, untrusted checkouts, or script injections. However, 10 of 12 action references are unpinned and one workflow has top-level write permissions, creating moderate workflow hygiene and change-integrity concerns.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
qrcode Version 1.5.4 | — | — |
framebus Version 6.2.0 | — | — |
card-validator Version 10.0.3 | — | — |
@braintree/uuid Version 2.0.0 | — | — |
credit-card-type Version 10.2.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.