paradoxlabs/cybersource
The package is licensed, documented, stable, and avoids install-time scripts. A security policy and automated security scanning are absent, while one contributor made all recent commits; organizational backing reduces but does not remove that maintenance risk.
80%
Total Score
88
100
94
88
Health Score Breakdown
All 134 recent commits came from one contributor, creating a real continuity risk. The organization-owned repository provides some capacity to hand off maintenance, so this is a caution rather than a severe risk.
Composer is used as a build tool, but no security scanning tooling is detected. The missing scanning is a process gap, not evidence of unsafe code by itself.
The repository has no SECURITY.md or other detected security policy, reducing transparency for reporting and handling vulnerabilities.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
 Ryan Hoerr |
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 paradoxlabs/tokenbase Version ^5.1 | — | — |
Weekly Downloads
Info
- Last Published
- 10 days ago
- Created
- 6 years ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.