The repository includes tests and clearly matches the package, but the project has little track record and limited security-process evidence. Its small dependency set and stable release format reduce the concern.
67%
Total Score
75
100
83
75
One registry maintainer is consistent with a user-owned project, but it leaves little visible publishing redundancy or maintainer capacity.
This package is 106 days old with only one release, so its maintenance and compatibility track record are still unproven.
The repository has zero stars, forks, and watchers, offering no community adoption signal; this is supporting evidence rather than a decisive health problem for a new package.
Composer is used for builds, but no security scanning tools are reported, leaving a modest security-process gap.
The repository has no security policy, reducing transparency for reporting and handling vulnerabilities in a package that processes webhooks.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
illuminate/support Version ^10.0|^11.0|^12.0|^13.0 | — | — |
felixmuhoro/laravel-mpesa Version ^1.2 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.