The project has a clear README, MIT licensing, a security policy, and a small dependency set. Its payment integration is marked as needing end-to-end validation, so production confidence remains limited.
67%
Total Score
67
100
90
83
This is a 62-day-old package with only one release, so its maintenance record and compatibility history are not yet established.
One contributor made 100% of the recent commits, concentrating maintenance knowledge despite the repository being organization-owned.
The repository recorded only 2 commits in the last 3 months, indicating limited observed maintenance activity, although the package is still young.
The single workflow uses top-level write permissions and has 1 unpinned action. The audit found no untrusted checkout, injection, or other reported findings, so this is a hygiene caution rather than a severe risk.
We didn't find any vulnerabilities for this package.
No maintainer information available.
| Dependency | Last Release | Score |
|---|---|---|
payum/core Version ^1.7 | — | — |
mobupay/mobupay-php Version ^1.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.