SDK that makes it easy to connect to the CMPayments payment API
52%
Total Score
caution
Usable with caveats: maintenance stopped about five years ago, despite an unarchived repository and clear release documentation.
There were zero commits and zero active maintainers in the last three months, consistent with the repository's last push in October 2021. For a payment integration library, this is a meaningful abandonment and update-risk concern.
The package has only three releases since November 2017, with no releases in the last 12 months and a median interval of about 722 days. This indicates very slow maintenance for a payment SDK.
There were no new or closed issues or pull requests in the last month, while two issues and one pull request remain open. This provides no evidence of current issue handling.
Composer build tooling is present, but no security scanning tools are configured. That weakens repository hygiene, though it is less serious than the lack of recent maintenance activity.
The repository is not archived, but its last push was October 21, 2021. The unarchived status is positive, while the old last-push date reinforces the maintenance concern.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
moneyphp/money Version ^3.0 | — | — |
cmpayments/guzzle-psp-authentication-middleware Version ^1.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.