It has a clear license, focused dependencies, release notes, and a matching organization-backed repository. Maintenance has gone quiet for over a year, with no security policy or scanning, so expect more ownership risk than the clean package metadata suggests.
67%
Total Score
75
86
50
The package has four releases over 928 days, but none in the last 12 months; the latest release was over a year ago, indicating limited recent maintenance.
The repository recorded zero commits and zero active maintainers in the last three months, reinforcing the extended release gap and increasing abandonment risk.
Composer build tooling is present, but no security scanning tools were detected, leaving less automated coverage for dependency and code risks.
The repository has no security policy, which reduces transparency for reporting and handling security issues, though this is a hygiene gap rather than evidence of an unsafe release.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
instride/payum-payrexx Version ^1.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.