There have been no releases or commits since December 2021, and the package is still on an unstable 0.x line. Its own README says not to use this version in production, while tests and an MIT declaration provide limited reassurance.
35%
Total Score
0
64
75
The latest release was on December 14, 2021, with no releases in the last 12 months; this indicates prolonged release inactivity for a payment plugin.
The repository recorded zero commits and zero active maintainers in the last three months, consistent with the long release gap and increasing abandonment risk.
The artifact includes a README and tests, and the repository has tests, but the README explicitly says not to use this version for production; the GitHub release is a small positive for release transparency.
The repository name does not match the package name and its README does not mention the package, so the package-to-source relationship is not clearly demonstrated.
The repository has no security policy, which weakens vulnerability-reporting transparency for a payment integration.
We didn't find any vulnerabilities for this package.
No maintainer information available.
| Dependency | Last Release | Score |
|---|---|---|
sylius/sylius Version ^1.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.