The repository has clear documentation, tests, a changelog, and a security policy. Its very recent release history and single active contributor leave limited evidence of long-term maintenance, while the organization backing reduces handoff risk; workflow references are not pinned.
64%
Total Score
67
100
78
88
All three releases appeared on the same day, so there is not yet evidence of sustained maintenance over time.
All recent commits came from one contributor, which is a maintenance concern; organization ownership provides some ability to hand work off but does not show a second active contributor.
There were only 3 commits in the last 3 months from one active maintainer, providing limited evidence of sustained development.
The repository has no stars, forks, or watchers; this is weak supporting evidence, though the package is newly released and popularity is not decisive.
Composer is used for builds, but no security-scanning tooling was detected, leaving a modest assurance gap for a payment SDK.
We didn't find any vulnerabilities for this package.
No maintainer information available.
No direct dependencies.
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.