Laravel Package for Mpesa Daraja API
68%
Total Score
caution
Usable with caveats: recent commit activity is absent and all workflow actions are unpinned.
One registry publishing account is a limited administrative base, but the repository is user-owned rather than organization-owned, so this is a modest concern rather than a decisive risk.
The registry namespace and repository are both owned by the same individual account, supporting a consistent project identity but not organizational backing.
The package has existed since November 2022 and has nine releases, but only one release arrived in the last 12 months, indicating a slow cadence.
There were zero commits and zero active maintainers in the last three months, a concrete sign that maintenance may have slowed after the latest release.
No repository security policy was found, leaving the process for reporting vulnerabilities unclear for a package that handles payment integrations.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
guzzlehttp/guzzle Version ^6.0|^7.0 | — | — |
illuminate/support Version ^5.0|^6.0|^7.0|^8.0|^9.0|^10.0|^11.0|^12.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.