The README, changelog, and release notes provide useful documentation, and the version is a stable major release. However, there is no active maintenance or security policy, leaving this payments integration unsuitable for a new dependency.
12%
Total Score
0
50
50
Packagist marks the entire package as abandoned, with no replacement named. This is a direct warning against taking a new dependency on the package.
The last registry release was about 9 years ago, with no releases in the last 12 months. The historical release cadence does not compensate for this prolonged inactivity.
The repository recorded zero commits and zero active maintainers in the last 3 months. Combined with the archived status, this indicates sustained abandonment rather than a temporary slowdown.
The linked repository is archived and was last pushed about 8 years ago, indicating the project is no longer maintained.
The repository has no security policy. For a payments package, this is a meaningful transparency gap, especially when maintenance has already stopped.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
sebastian/money Version ~1.6 | — | — |
composer/installers Version ~1.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.