Clear documentation, repository tests, and pinned workflow actions support adoption. Organization backing and recent activity help, but the project remains lightly exercised and dependent on one recent contributor.
68%
Total Score
75
100
89
83
The package is only 70 days old with two releases, so its maintenance and release pattern are not yet well established.
One contributor made all two commits in the last three months, creating a concentrated maintenance dependency; organization ownership provides some handoff capacity but does not remove the concentration.
Only two commits were recorded in the last three months, so observed maintenance activity is limited even though the latest push was recent.
The repository has only 2 stars and no forks or watchers, providing little external evidence of adoption or review.
The repository has no published security policy, leaving vulnerability reporting and response expectations undocumented for a payment SDK.
We didn't find any vulnerabilities for this package.
No maintainer information available.
| Dependency | Last Release | Score |
|---|---|---|
guzzlehttp/guzzle Version ^7.12.1 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.