The package has a usable README, tests, and no install-time scripts. Its last registry release was in March 2018, while the repository was last pushed in August 2022; payment integrations can become costly to maintain when dependencies age.
42%
Total Score
100
72
75
The latest release was in March 2018, with no releases in the last 12 months; the package is about 8 years old. This is strong evidence of abandonment risk despite the repository remaining available.
The repository has only 5 stars and 1 fork, providing little supporting evidence of broad community validation. Low popularity alone is not decisive, but it offers no compensation for the maintenance gap.
Composer build tooling is present, but no security scanning tools are reported. This is a modest transparency and maintenance gap rather than a severe risk.
The repository is not archived, which preserves some adoption confidence, but its last push was in August 2022 and does not offset the long release gap.
The repository has no security policy. For a payment integration, that weakens vulnerability-reporting transparency and leaves the long maintenance gap less reassuring.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
nesbot/carbon Version ^1.22 | — | — |
illuminate/support Version ^5.5 | — | — |
gerencianet/gerencianet-sdk-php Version 2.* | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.