The package includes a usable README, tests, and organization backing. Maintenance evidence is weak after the initial release burst, and the repository reports no security policy or scanning tools.
60%
Total Score
50
78
50
The repository recorded zero commits and zero active maintainers over the last three months. This is the clearest sign that maintenance may have paused after the initial release burst.
Five releases arrived over 153 days, with a median interval of about 1 day, showing strong initial publishing activity. The latest release was about three months ago, so this does not establish ongoing maintenance.
The repository has zero stars, forks, and watchers. This is supporting evidence of a small or very new project rather than a severe concern, especially given its 153-day age.
Composer and Box provide build tooling, which supports repeatable packaging. No security scanning tools were detected, leaving a modest repository hygiene gap.
The repository has no security policy. For a CLI that handles payment credentials and API tokens, this reduces transparency for reporting and managing security issues.
We didn't find any vulnerabilities for this package.
No maintainer information available.
| Dependency | Last Release | Score |
|---|---|---|
symfony/console Version ^7.0 | — | — |
guzzlehttp/guzzle Version ^7.0 | — | — |
finaegis/payment-sdk Version ^1.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.