Official PayU integration plugin for Magento 2
18%
Total Score
critical
The package is deprecated, archived, and has had no registry releases since 2020.
Packagist marks the entire package as abandoned, with no replacement named. This is a direct warning against taking a new dependency on it.
The package has 14 releases since December 2017, but none in the last 12 months; its latest registry release was December 8, 2020. This strongly indicates abandonment.
The repository recorded zero commits and zero active maintainers in the last 3 months. Combined with the archived state, this provides no evidence of ongoing maintenance.
The linked PayU-EMEA repository is archived, which indicates the source project is no longer an active maintenance target despite a recorded push on May 14, 2026.
The artifact declares OSL-3.0 and AFL-3.0 and includes a license file, but the detected file license is GPL-3.0. That mismatch should be resolved for legal compatibility.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
magento/framework Version >100.0 | — | — |
magento/module-sales Version >100.0 | — | — |
magento/module-payment Version >100.0 | — | — |
magento/module-checkout Version >100.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.