Laravel Mpesa package
68%
Total Score
caution
Usable with caveats: one release and a single active contributor leave maintenance continuity uncertain.
The repository is owned by a personal GitHub account rather than an organization, so the single-contributor concentration is not visibly offset by organizational backing.
This package is only 40 days old and has one release, so there is not yet enough release history to demonstrate sustained maintenance.
Only one contributor made all 6 recent commits, leaving maintenance and response capacity concentrated in a single person.
The repository recorded 6 commits in the last 3 months, showing recent work, although all activity came from one maintainer.
The repository has no published security policy, which makes reporting and handling vulnerabilities less transparent for a package handling payment integrations.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
illuminate/http Version ^12.61.1|^13.12 | — | — |
monolog/monolog Version ^3.9 | — | — |
guzzlehttp/guzzle Version ^7.12.1 | — | — |
illuminate/console Version ^12.61.1|^13.12 | — | — |
illuminate/routing Version ^12.61.1|^13.12 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.