ableskills/trust-payments
The module has clear installation guidance and organizational ownership. Its license and small dependency set are straightforward, but the project shows little evidence of current care or security oversight.
43%
Total Score
50
100
75
75
Health Score Breakdown
The package is about four and a half years old, has only four releases, and has had no release in the last 12 months. This is strong evidence of abandonment risk for a payment integration.
The repository recorded zero commits and zero active maintainers in the last three months, consistent with the long release gap and materially reducing confidence in ongoing maintenance.
There is one open issue and no issue or pull-request activity in the last month, providing no evidence that reported problems are being actively handled.
Composer build tooling is present, but no security scanning tools are configured. That leaves a meaningful oversight gap for a package handling payment flows.
The repository has no published security policy, reducing transparency for reporting and handling vulnerabilities in a payment module.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
 Dmitry Fedyuk |
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 firebase/php-jwt Version * | — | — |
securetrading/stpp_json Version * | — | — |
Weekly Downloads
Info
- Last Published
- 4 years ago
- Created
- 4 years ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.