It includes tests, a clear MIT license, and a small dependency footprint. The organization-backed repository is active and not archived, but maintenance is very thin and workflow references are entirely unpinned.
58%
Total Score
67
100
86
67
The package has had no registry release in over eight years and none in the last 12 months, indicating a stale published release line despite the repository still showing some activity.
All recent commits came from one contributor. Organization ownership provides some handoff capacity, but no second active contributor is shown to reduce the immediate concentration risk.
There was one commit in the last three months from one active maintainer, showing current activity but only limited maintenance capacity.
No security policy is present in the repository, leaving reporting and response expectations undocumented.
Version 0.1.1 is not a prerelease, but it remains an early major version, which provides less maturity evidence than a stable major release.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
nailsapp/module-order-payment Version dev-develop | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.