The package includes a clear MIT license, a substantial README, repository tests, release notes, and automated dependency scanning. Its security policy is absent, and the project is too new to demonstrate sustained maintenance.
68%
Total Score
75
100
94
67
This package is 0 days old and has made three releases within roughly 7 hours, showing active initial publication but no established maintenance record yet.
There were 0 commits and 0 active maintainers in the last 3 months; the repository was pushed at release time and the package is brand new, so this is an unproven maintenance record rather than evidence of abandonment.
The repository has no published security policy, leaving vulnerability reporting and response expectations unclear for a payment SDK.
The only workflow was fully analyzed with no untrusted triggers, sinks, or audit findings, but all 4 of its action references are unpinned, leaving avoidable update and supply-chain exposure.
We didn't find any vulnerabilities for this package.
No maintainer information available.
| Dependency | Last Release | Score |
|---|---|---|
psr/log Version ^1.1 || ^2.0 || ^3.0 | — | — |
psr/http-client Version ^1.0 | — | — |
psr/http-factory Version ^1.0 | — | — |
psr/http-message Version ^1.1 || ^2.0 | — | — |
php-http/discovery Version ^1.19 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.