kdaviesnz/cpgi
It is explicitly alpha, warns against production use, and lacks a security policy. MIT licensing, tests, release notes, and no install scripts provide useful transparency, but they do not offset the maturity risk.
30%
Total Score
0
58
75
Health Score Breakdown
This package has only one release, published more than eight years ago, with no releases in the last 12 months. That strongly indicates abandonment risk.
The repository recorded zero commits and zero active maintainers in the last three months. Combined with the old release date, this is strong evidence of a dormant project.
The assessed version is a prerelease alpha, and the registry shows every recent release as a prerelease. The README also warns that it is not tested with actual payments and should not be used in production.
The repository is not archived, which is a positive sign, but it was last pushed more than eight years ago. The non-archived status does not compensate for the lack of recent activity.
The repository has no dedicated security policy. The README provides an email contact for security issues, which offers some guidance but is weaker than a maintained policy.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
 Kevin Davies |
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 kdaviesnz/escrow Version v1.0.0.0-alpha | — | — |
kdaviesnz/square Version dev-master | — | — |
stripe/stripe-php Version v6.4.2 | — | — |
Weekly Downloads
Info
- Last Published
- 8 years ago
- Created
- 8 years ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.