The MIT license, README, and matching repository make the package reasonably transparent. Its single-user project has no security policy, and the dependency set includes several integrations that increase maintenance burden.
38%
Total Score
38
50
78
83
The package has only two releases, with the latest published in September 2019 and none in the last 12 months. This long period without updates is strong evidence of abandonment risk.
There were no commits and no active maintainers in the last three months, consistent with a repository that has been dormant for years. This materially increases abandonment risk.
Eight runtime dependencies, including multiple PHP extensions and the PayPal SDK, create a relatively broad compatibility and maintenance surface for an old package.
Only one registry account has publishing access. That is a thin publishing base, and the repository's inactive state provides no compensating evidence of a broader active maintainer group.
The repository is owned by an individual account rather than an organization. Combined with one registry maintainer and no recent activity, this provides limited evidence of continuing project backing.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
nesbot/carbon Version * | — | — |
paypal/rest-api-sdk-php Version * | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.