craftcms/commerce-worldpay
The package is backed by the Craft CMS organization, has matching source code, a clear MIT license, and a documented security policy. Its workflows complete without detected dangerous patterns, although all three action references are unpinned.
60%
Total Score
67
90
75
Health Score Breakdown
The latest registry release was about two and a half years ago, with no releases in the last 12 months. The package has a substantial history of 14 releases, but the current pause raises maintenance risk.
The repository recorded no commits and no active maintainers in the last three months. This supports the concern that maintenance has stalled, although the package may be stable and complete.
There were no new or closed issues or pull requests in the last month, while five issues and one pull request remain open. This indicates limited recent project activity.
All three workflows were analyzed successfully with no dangerous triggers, untrusted checkouts, script injection, or audit findings. However, all three action references are unpinned, which is a supply-chain hygiene weakness.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
 Pixel & Tonic |
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 craftcms/cms Version ^4.0.0-RC3|^5.0.0-beta.7 | — | — |
omnipay/worldpay Version ^3.0.0 | — | — |
craftcms/commerce Version ^4.0.0-RC1|^5.0.0-beta.1 | — | — |
craftcms/commerce-omnipay Version ^4.1.0 | — | — |
Weekly Downloads
Info
- Last Published
- 2 years ago
- Created
- 8 years ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.