The package has a clear license, a small dependency set, a changelog, and no install-time scripts. Its long inactivity and weak repository linkage make future fixes and provenance uncertain.
43%
Total Score
50
100
67
75
The latest release was about 5 years ago, with no releases in the last 12 months. Four releases over the package's lifetime show some initial activity, but the long gap materially raises abandonment risk.
The repository recorded zero commits and zero active maintainers in the last 3 months, consistent with the registry's multi-year release gap. This is strong evidence that maintenance has stopped.
The repository name does not match the package name and its README does not mention the package, leaving uncertainty about whether it is the authoritative source. The mismatch is more concerning because the package is a focused module rather than clearly identified as a sub-package.
The repository has zero stars and forks and only two watchers, providing little supporting evidence of active community use. Low popularity is not decisive, but it offers no counterweight to the stale activity.
The repository has no security policy. For a payment-related integration, this is a meaningful transparency and vulnerability-reporting gap.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
silverstripe/framework Version ^4.1 | — | — |
iqnection-modules/payment Version ^2.1 | — | — |
iqnection-modules/formbuilder Version * | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.