codephoenixdev/moneypal-laravel-gateway
The package has a small seven-file surface and no tests or security scanning. MIT licensing, release notes, and a matching repository improve transparency, but maintenance evidence is limited.
58%
Total Score
50
80
50
Health Score Breakdown
A post-autoload-dump install-time script runs during Composer installation. Without evidence about its contents, this adds some supply-chain exposure but is not severe on its own.
This is the only release, published 515 days ago, with no releases in the last 12 months. That leaves little evidence of continued maintenance for a payment integration.
The repository recorded zero commits and zero active maintainers in the last three months, despite the repository remaining unarchived. This is a meaningful maintenance warning.
Composer is used for the build, but no security scanning tool is present. For a payment gateway, that is a real hygiene gap, although it does not establish a vulnerability.
The repository has no security policy, leaving vulnerability reporting and handling expectations undocumented. This is a transparency gap for an integration that processes payments.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
 Your Name |
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 illuminate/support Version 8.*|9.*|10.* | — | — |
Weekly Downloads
Info
- Last Published
- 1 year ago
- Created
- 1 year ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.