aura/payload

aura/payload 3.1.0 appears generally safe to depend on: it is a mature package with more than 11 years of release history, a stable major version, an MIT license, tests and changelog coverage, a small dependency surface, no install-time lifecycle scripts, and an organization-backed, non-archived repository. The main concerns are that commit activity shows no commits or active maintainers in the last 3 months, release cadence is sparse at one release in the last 12 months, the repository has no security policy or explicit top-level workflow permissions, and no security-scanning tooling was detected. These are meaningful transparency and maintenance cautions, but they do not outweigh the evidence of recent publication, complete package scaffolding, safe workflow analysis, and ongoing repository activity.

Latest 3.1.0Packagist

Vulnerabilities

We didn't find any vulnerabilities for this package.

Maintainers

Aura.Payload Contributors

Direct Dependencies

Dependency	Last Release	Score
aura/payload-interface Version ^3.0	—	—