The MIT license, usable README, and lack of install scripts make the release straightforward to inspect and install. The minimal project has no security policy or scanning, leaving little support evidence beyond its original publication.
42%
Total Score
25
69
75
The package has had only three releases, all concentrated between January 17 and January 19, 2023, with no release in about 3 years and 8 months. This is strong abandonment evidence.
There were zero commits and zero active maintainers in the last three months, consistent with the repository's last push in January 2023. This materially increases maintenance and abandonment risk.
Only one registry maintainer is listed, leaving a thin publishing and support base. The user-owned repository provides no organizational backing to compensate for that concentration.
The repository has zero stars and forks and only one watcher. Popularity is not required for a healthy package, but these counters provide no supporting evidence of adoption or community resilience.
Composer build tooling is present, but no security-scanning tools are configured. This is a transparency and maintenance gap for a payment-related SDK.
We didn't find any vulnerabilities for this package.
No direct dependencies.
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.