cashela/payin
The package includes a usable README, tests, and no install-time scripts, while its organization backing adds some context. There is no security policy, and the workflow leaves both action references unpinned.
61%
Total Score
75
100
67
67
Health Score Breakdown
This is the package's first release, published today, so there is no release track record or established maintenance pattern yet.
No commits or active maintainers were observed in the last three months, but the package was released today, so this is more a lack of maintenance history than evidence of abandonment.
The repository has no security policy, leaving vulnerability-reporting and response expectations undocumented for an SDK that handles payment-related integrations.
v0.1.0 is an early non-stable-major release, which indicates a higher likelihood of breaking changes than a mature stable release.
The sole workflow was fully analyzed and has no detected dangerous sinks or audit findings, but both of its action references are unpinned, weakening build reproducibility and supply-chain hygiene.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
No maintainer information available.
Direct Dependencies
No direct dependencies.
Weekly Downloads
Info
- Last Published
- 23 hours ago
- Created
- 23 hours ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.