This is a usable and reasonably transparent young package, but not yet a mature dependency. The release is stable and recently published, the repository is active, unarchived, clearly matches the package, and the artifact includes documentation, tests, a changelog, licensing, and no install-time lifecycle scripts. However, the project is only 81 days old with three releases, has no observable community activity or popularity, relies on a single registry maintainer, and lacks repository security scanning and a security policy. These gaps warrant caution for a payment-related Laravel dependency, although the available evidence does not indicate abandonment or registry deprecation.
72%
Total Score
67
100
83
90
Only one registry account, GoPay, has publish access. This is a thin publishing base, although the organization-backed repository provides some compensating project ownership context.
The package is young at 81 days and has only three releases, with a median interval of about 41 days; this limits maturity evidence, though the latest release was published recently and releases are ongoing.
There are no open issues or pull requests and no issue or pull-request activity in the last month. This is not evidence of abandonment by itself, but it also provides no demonstrated community support.
The repository has zero stars, forks, and watchers. Popularity is supporting evidence rather than a verdict, but these values provide no external adoption or durability evidence for this young package.
Composer is used as the build tool, which fits the PHP package, but no security scanning tools are configured. The missing scanning reduces supply-chain transparency for a payment-related package.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
laravel/framework Version ^12.0 | — | — |
mecxer713/gopay-php Version ^1.3.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.