There is no security policy or automated security scanning, and the project has only two stars. The MIT license, clear README, and lack of install scripts reduce adoption friction, but do not offset the maintenance risk.
38%
Total Score
0
100
71
75
The package has only one release, published about six years ago, with no releases in the last 12 months. That leaves little evidence of ongoing maintenance or compatibility work.
The repository recorded zero commits and zero active maintainers in the last three months, consistent with the package's long release gap and indicating substantial abandonment risk.
The repository has 2 stars, 0 forks, and 1 watcher. Popularity is only supporting evidence, but these very low adoption indicators provide little external evidence of active stewardship.
Composer is used as the build tool, but no security scanning tools are configured. The missing scanning is a modest maintenance and release-hygiene concern.
No security policy was found in the repository. For an SDK that handles API credentials and payment integration, this is a genuine transparency and maintenance gap.
We didn't find any vulnerabilities for this package.
No direct dependencies.
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.