onetoweb/trustly
The README, changelog, and release notes give consumers useful documentation, and organizational ownership adds continuity. Testing and repository security coverage are limited, so pinning this version is sensible for production use.
67%
Total Score
75
100
86
75
Health Score Breakdown
Only 3 releases have appeared across about 2 years and 5 months, with one release in the last 12 months and a median interval of about 15 months. The fresh v2.0.0 release helps, but the overall cadence is slow.
The repository had 0 commits and 0 active maintainers in the last 3 months. The release pushed on the assessment date provides some compensating evidence, but ongoing maintenance capacity remains uncertain.
Composer is used for the build, providing basic project tooling, but no security scanning tools are configured. That is a modest transparency and maintenance gap for an API client.
The repository has no security policy, leaving vulnerability-reporting and response expectations undocumented. This is a genuine but non-severe transparency gap.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
 Jonathan van 't Ende |
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 ramsey/uuid Version >=3.0 | — | — |
guzzlehttp/guzzle Version ^7.0 || ^8.0 | — | — |
symfony/http-foundation Version >=4.0 | — | — |
Weekly Downloads
Info
- Last Published
- 3 days ago
- Created
- 2 years ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.