The MIT license and extensive README make integration transparent, while organization backing provides some continuity. The release burst and no commits in the last three months leave maintenance uncertain; the missing security policy is a smaller transparency gap.
62%
Total Score
75
100
88
83
All four releases arrived in a burst over roughly 6 hours, and there have been no later releases during the package's 216-day lifetime. That leaves the longer-term maintenance pattern unproven.
The repository recorded zero commits and zero active maintainers over the last three months. Combined with the release burst, this is a meaningful abandonment concern.
Composer is used for the build, but no security scanning tools are reported. The missing scanning is a modest hygiene limitation rather than evidence of abandonment.
The repository has no published security policy, leaving vulnerability-reporting expectations unclear for an SDK handling payment-related APIs.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
apimatic/core Version ~0.3.17 | — | — |
apimatic/unirest-php Version ^4.0.6 | — | — |
apimatic/core-interfaces Version ~0.1.5 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.