Usable with caveats: the package is actively releasing, clearly documented, licensed, and backed by a matching repository with tests and security tooling. It is only 41 days old and all recent commits come from one contributor, so long-term maintenance capacity is not yet proven.
72%
Total Score
63
100
89
80
The package runs a post-autoload-dump install lifecycle script. This is common in Laravel packages, but it adds installation-time behavior that should be understood before adopting a payment-related dependency.
The registry has one publishing maintainer, consistent with the matching individual-owned repository. This confirms a narrow publishing base but does not by itself outweigh the repository's active development evidence.
The registry namespace and repository owner match, but the owner is an individual account rather than an organization, so there is no organizational maintenance cushion.
The package is young at 41 days, with three releases and a median interval of about 21 days. This shows active initial development but provides little evidence of long-term maintenance.
All eight recent commits came from one contributor, leaving no demonstrated backup maintainer if that person becomes unavailable.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
stripe/stripe-php Version ^17.4||^18.0||^19.0||^20.0||^21.0 | — | — |
illuminate/support Version ^12.0||^13.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.