The MIT license, small dependency surface, and matching repository make the package easy to inspect. Release notes and organizational ownership help, but the lack of a security policy and minimal community traction leave limited support visibility.
40%
Total Score
50
100
63
50
The latest release was in November 2017, with no releases in the last 12 months despite 26 total releases. This long maintenance gap is a substantial abandonment concern.
The repository had zero commits and zero active maintainers in the last 3 months, consistent with the long release gap and providing no evidence of current maintenance.
The repository has only 1 star and 2 forks, offering little independent evidence of community review or support. Low popularity is supporting caution rather than a verdict by itself.
The repository has no security policy. For a payment-processing integration, this is a meaningful transparency and maintenance gap.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
omnipay/common Version ~2.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.