dotpay api implementation for payum
42%
Total Score
unhealthy
Risky: no release since 2016 and no recent repository activity point to likely abandonment.
The package has had only 4 releases, with no release in the last 12 months; its latest release was over 9 years ago. This is strong evidence of abandonment risk, despite the stable version format.
The repository recorded 0 commits and 0 active maintainers in the last 3 months, and its last push was in November 2019. This substantially weakens confidence in ongoing maintenance.
The artifact includes a license file and the repository also has one, so licensing is not missing. However, the declared LGPL-3.0+ conflicts with the detected BSD-3-Clause license, creating an adoption and compliance concern.
The linked repository has no security policy. For a payment gateway integration, the absence of documented vulnerability-reporting guidance reduces transparency and support confidence.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
payum/core Version ^1.3 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.