The repository still has tests and a readable README, while organizational ownership provides some continuity. Six open issues, no commits in the last three months, and a proprietary license leave maintenance and reuse risks.
38%
Total Score
67
60
100
The manifest declares a proprietary license, with no detected license text in the package or repository. That leaves reuse rights unclear for a package presented as open source.
The latest release was in May 2018, with no releases in the last 12 months. This long release gap is a substantial maintenance concern for a payment integration.
The repository had zero commits and zero active maintainers in the last three months. Although it was pushed in September 2023, current development activity is not demonstrated.
Six issues remain open, with no new or closed issues and no pull-request activity in the last month. This suggests limited current issue handling.
The repository name does not match the package name and its README does not mention the package. The matching organization owner provides some context, but package ownership is less transparent.
We didn't find any vulnerabilities for this package.
No maintainer information available.
| Dependency | Last Release | Score |
|---|---|---|
payum/core Version ~1.0 | — | — |
openpayu/openpayu Version ^2.1 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.