Payum Stripe gateways
70%
Total Score
67
100
93
100
The package has 38 releases over roughly six years and a release in the last four months, but only one release in the past year indicates a slower recent cadence.
The repository recorded zero commits and zero active maintainers over the past three months. The recent release provides some compensating evidence, but this still leaves a meaningful maintenance concern.
There were no new or closed issues or pull requests in the past month, with four open issues and one open pull request; this is consistent with limited current project activity.
The single workflow was fully analyzed with no untrusted checkout or script-injection findings. All four action references are unpinned, and the low-confidence cache-poisoning finding is a hygiene concern rather than a demonstrated severe risk.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
payum/core Version ^1.6 | — | — |
stripe/stripe-php Version ^12|^13|^14|^15|^16|^17 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.