ghijk/donation-checkout
Four releases in the last year and recent repository activity show the package is being maintained. Its tests, release notes, security policy, and dependency scanning provide useful transparency for adopters.
68%
Total Score
67
100
100
100
Health Score Breakdown
The repository owner is an individual user rather than an organization, so the single-contributor concentration is not offset by visible organizational backing.
All eight recent commits came from one contributor, so maintenance depends heavily on a single person and has limited handoff resilience.
The audit found one high-confidence bot-conditions issue in a pull_request_target workflow, and three workflows grant top-level write permissions. No untrusted checkout or script-injection sink was found, so this is a meaningful hygiene concern rather than a standalone severe risk.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
 Steven Grant |
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 statamic/cms Version ^6.0 | — | — |
stripe/stripe-php Version ^10.0 || ^11.0 || ^12.0 || ^13.0 || ^14.0 || ^15.0 || ^16.0 | — | — |
Weekly Downloads
Info
- Last Published
- 5 months ago
- Created
- 3 years ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.