Affiliate attribution, referral tracking, and commission management for Laravel commerce stacks.
68%
Total Score
100
100
79
75
The package published 35 releases in its first 120 days, but the latest registry release was 120 days before collection, making maintenance continuity less certain despite the strong initial burst.
Composer is used as the build tool, but no security scanning tools were detected in the repository. This is a modest transparency and maintenance concern.
The repository has no published security policy. That weakens vulnerability-reporting transparency, although it does not by itself show abandonment.
Version v0.1.34 is not a stable major release, so compatibility expectations are lower; it is not marked as a prerelease and recent releases are consistently non-prerelease.
No GitHub Actions workflows were present, so the audit found no workflow hazards; this also means there is no observed workflow-based automation or security checking to support the release process.
We didn't find any vulnerabilities for this package.
No maintainer information available.
| Dependency | Last Release | Score |
|---|---|---|
aiarmada/commerce-support Version self.version | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.