The integration is straightforward to inspect. Its clear README and recent release notes help, but add your own tests and pin this version if payment processing is important.
68%
Total Score
50
94
50
Only one registry account has publish access. That is a real continuity concern for a user-owned project because release capability is concentrated in one person.
One contributor made all commits during the last three months, giving the project a single-person bus factor and increasing abandonment risk.
Only one commit was recorded in the last three months, all from one active maintainer. Recent release activity compensates partly, but ongoing maintenance capacity still looks thin.
Composer build tooling is present, but no security-scanning tooling was detected. For a payment-related package, that leaves a modest transparency gap.
The repository has no security policy. This is a maintenance and disclosure gap for a package handling payment integration, though it is not severe on its own.
We didn't find any vulnerabilities for this package.
No direct dependencies.
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.