The package is licensed, tested, and free of install-time scripts, with a focused dependency set. Its low adoption and lack of security scanning leave less evidence for long-term resilience.
70%
Total Score
50
100
89
83
The registry namespace and repository owner match, and the owner is a single user account. This provides ownership continuity but less organizational backing than a verified organization would.
There were no commits and no active maintainers in the last 3 months. This is a meaningful maintenance concern, although the recent registry releases and repository push provide some counterevidence.
The repository has only 4 stars, 7 forks, and 3 watchers, indicating a small user and contributor base. Low popularity is supporting evidence rather than a standalone health failure.
Composer is used for builds, but no security scanning tool was detected. The missing scanning reduces supply-chain transparency, though it does not by itself show unsafe behavior.
The repository has no security policy, leaving no documented process for reporting and handling vulnerabilities in this payment-related client library.
We didn't find any vulnerabilities for this package.
No direct dependencies.
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.