paradoxlabs/tokenbase
Healthy and suitable to use, with a narrow maintenance base as the main caveat. It has a decade of releases, a current stable version, active recent commits, clear repository ownership, tests, and a license, but all recent work comes from one contributor and the repository has no security policy or scanning.
78%
Total Score
88
89
75
Health Score Breakdown
All 15 recent commits came from one contributor, creating a real continuity risk. Organization backing provides some ability to transfer maintenance, but no second recent contributor is evidenced.
The repository has only 4 stars and 4 forks, indicating limited external adoption. Popularity is supporting evidence rather than a health verdict, and the active release and commit history compensate for this weakness.
Composer build tooling is present, but no security-scanning tools were detected. This is a transparency and maintenance-process gap, though not evidence that the package is unsafe.
The repository has no security policy, leaving vulnerability reporting and response expectations undocumented for a payment-related library.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
 Ryan Hoerr |
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 monolog/monolog Version ^1.11||^2.0||^3.0 | — | — |
magento/framework Version ^102.0||^103.0 | — | — |
magento/module-quote Version ^100.0||^101.0 | — | — |
magento/module-sales Version ^100.0||^101.0||^102.0||^103.0 | — | — |
magento/module-store Version ^100.0||^101.0 | — | — |
Weekly Downloads
Info
- Last Published
- 19 days ago
- Created
- 10 years ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.