The package includes a clear MIT license, tests, documentation, and no install-time scripts. Its single-user project has no recent commit activity or releases, and the registry marks the package abandoned.
15%
Total Score
25
100
64
75
Packagist marks the entire package as abandoned and offers no distinct replacement, which is a severe warning for a new dependency.
The last release was in October 2016, with zero releases in the past 12 months; this long gap strongly indicates abandonment for a payment integration.
The repository recorded zero commits and zero active maintainers over the last three months, with no provided evidence of current maintenance capacity.
Only one registry publishing account is listed, leaving little visible publishing redundancy; the linked repository is user-owned rather than organization-backed.
The project uses Composer but has no security-scanning tools, leaving a modest transparency and maintenance gap that reinforces the broader inactivity concerns.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
omnipay/common Version ~2.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.