The package has a clear MIT license, substantial documentation, tests, and a repository that matches its name. Install-time scripts, no security tooling or policy, and a single publisher increase the care needed for a payment dependency.
38%
Total Score
33
50
81
50
All eight releases arrived within about 3 hours in August 2025, followed by no releases in roughly a year. That concentrated launch followed by silence is strong abandonment evidence.
The repository recorded zero commits and zero active maintainers in the last 3 months, consistent with the year-long release gap and indicating no observed ongoing maintenance.
The package declares 15 runtime dependencies, including Laravel, Filament, payment and HTTP components. This is a broad dependency surface for a payment gateway and adds maintenance burden.
The package runs post-autoload-dump, post-install-cmd, and post-update-cmd scripts, increasing installation and update trust requirements for consumers.
Only one registry publishing account is listed. This is a thin publishing base, although the matching repository and project backing show an identifiable owner.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
ramsey/uuid Version ^4.0 | — | — |
symfony/uid Version ^6.0|^7.0 | — | — |
nesbot/carbon Version ^2.0|^3.0 | — | — |
filament/forms Version ^3.0 | — | — |
filament/tables Version ^3.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.