This is a young, pre-1.0 package with only two releases over 77 days and no recorded commits or active maintainers in the last 3 months, so its long-term maintenance and API stability are not yet established. However, it is backed by an organization-owned, non-archived repository, includes comprehensive tests and build/static-analysis tooling, has no install lifecycle scripts or dangerous workflow patterns, and is not deprecated. It is reasonable to evaluate for use with appropriate version pinning, but it carries meaningful maturity and maintenance risk for a production dependency.
62%
Total Score
75
100
83
80
The package is only 77 days old and has had two releases, with a median release interval of about 78 days. This limited history provides little evidence of sustained maintenance or mature release practice.
The repository reports zero commits and zero active maintainers in the last 3 months. Given the package's short 77-day history, this is a meaningful warning about maintenance continuity, despite the recent push timestamp.
There are no open issues and one open pull request, but no issues or pull requests were merged in the last month. This gives little evidence of an active feedback and review cycle.
The repository has zero stars, forks, and watchers. This limits independent adoption evidence, but popularity is only supporting evidence and is not itself a decisive health failure for a young, focused package.
The repository has no security policy. This is a transparency and vulnerability-reporting gap, though it is not by itself evidence that the package is unsafe to depend on.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
omnipay/common Version ^3.2 | — | — |
paypal/paypal-server-sdk Version ^2.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.