The MIT license, clear README, and small dependency footprint make adoption straightforward. Its public project is young, with no recent commits and only one release, so ongoing maintenance remains uncertain.
62%
Total Score
75
100
78
75
One registry publisher is reasonable for a small user-owned project, but it also indicates a thin publishing base when paired with no recent repository activity.
This is a young package at 174 days old with only one release, so there is little release history from which to judge sustained maintenance.
There were zero commits and zero active maintainers in the last three months, leaving no observed evidence of ongoing maintenance after the initial release.
The repository has no stars, forks, or watchers. For a young, specialized payment SDK this is supporting context rather than decisive evidence, but it provides no maturity signal.
Composer is used for the build, which fits the package ecosystem, but no security scanning tooling was detected; this is a modest transparency and maintenance gap rather than a severe risk.
We didn't find any vulnerabilities for this package.
No direct dependencies.
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.