The source repository includes tests, a changelog, release notes, and Dependabot scanning, which support transparent maintenance. Workflow dependencies are all unpinned, and seven pull requests remain open without recent merges, so updates may require extra care.
62%
Total Score
33
50
88
75
The package has 21 releases and a historical median interval of about 33 days, but its latest registry release was over three years ago with no releases in the last 12 months. This materially raises staleness risk.
The repository recorded zero commits and zero active maintainers in the last three months. Combined with the old registry release, this indicates materially slowed maintenance.
Eight runtime dependencies create a meaningful compatibility surface for a payment driver, but the profile is explicit and not unusually large for this type of PHP integration package.
The registry namespace and repository are owned by the same individual account, and the repository is not presented as organization-backed. This gives limited maintainer redundancy.
There are no open issues, but seven open pull requests have seen no new or merged activity in the last month. This suggests unresolved maintenance work despite the absence of reported issues.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
moneyphp/money Version ^4.1 | — | — |
omnipay/common Version ^3.1 | — | — |
symfony/http-client Version ^6.2 | — | — |
symfony/http-foundation Version ^6.2 | — | — |
php-http/message-factory Version ^1.1 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.