The package includes tests, release notes, and a clear README, while the linked project is not archived. Its only release and zero commits in the last three months leave maintenance capacity unproven, and all four workflow actions are unpinned.
62%
Total Score
50
70
50
This is the package's only release, published 208 days ago, so there is little release history to demonstrate sustained maintenance. The repository was pushed more recently, but no additional registry release offsets the limited version history.
The repository recorded zero commits and zero active maintainers in the last three months. For a payment integration, that leaves current maintenance capacity uncertain.
The repository has 2 stars and no forks or watchers, offering little external evidence of broad review or adoption. Popularity is supporting evidence only, so this modestly lowers confidence rather than determining the verdict.
The project uses Composer, but no security scanning tools were detected. This is a hygiene gap rather than evidence that the release is unfit.
The repository has no security policy, reducing transparency about vulnerability reporting and response expectations. The available tests and release notes provide some compensating project documentation but do not replace a security process.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
league/omnipay Version ^3 | — | — |
omnipay/paypal Version ^3.0 | — | — |
omnipay/stripe Version ^3.2 | — | — |
stripe/stripe-php Version ^17.5 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.