The stable MIT license, small dependency set, and organization-backed repository are reassuring. However, the package lacks a README and security policy, while its limited repository activity provides little evidence of current maintenance.
44%
Total Score
100
100
58
83
The package has had 7 releases, but none in the last 12 months; its latest release was in November 2020, indicating prolonged release abandonment risk.
The published artifact has no README, which makes integration harder for a library; the absence of tests and a changelog is normal for a packaged artifact and is not penalized here.
The repository has zero stars, forks, and watchers, offering no supporting evidence of community validation or shared maintenance capacity.
The repository is not archived, which preserves some adoption potential, but it was last pushed in November 2022 and is not actively maintained today.
The repository has no security policy, reducing transparency around vulnerability reporting and response for a package that handles payment integration.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
esas/cmsgate-core Version ~v1.13.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.