The package has only one release and a two-file source tree, with no tests or consumer README. It is not deprecated and has a declared MIT license, but the limited evidence supports pinning cautiously rather than treating it as mature.
62%
Total Score
83
50
The artifact and repository each contain only composer.json and src/ServiceProvider.php, indicating a very small implementation with little visible project structure.
The package has no README, tests, or changelog. Missing tests and changelog are normal for published artifacts, but the missing README weakens guidance for Laravel consumers.
This is a 107-day-old package with only one release and no established release cadence, so maintenance maturity remains unproven.
The repository has no published security policy, reducing transparency for reporting and handling vulnerabilities in a package that integrates with payment functionality.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
illuminate/support Version ^10.0|^11.0|^12.0|^13.0 | — | — |
felixmuhoro/laravel-mpesa Version ^1.2 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.