The repository has no security policy, and its small user base offers little evidence of ongoing support. It is not deprecated or archived, and the package includes a README and no install-time scripts.
44%
Total Score
63
79
75
The latest release was in December 2018, nearly 8 years ago, with no releases in the last 12 months. This strongly suggests the package is no longer actively maintained.
The repository recorded no commits and no active maintainers in the last 3 months, while its last push was in April 2020, over 6 years ago. This reinforces the abandonment risk.
There were no new or closed issues in the last month and no merged pull requests, with one pull request still open. This provides little evidence of current maintenance.
The repository has only 10 stars and 5 forks, offering limited supporting evidence of broad use or community support. Popularity is secondary, but it does not offset the maintenance gaps.
The repository has no security policy. For a billing package handling payment and financial workflows, this is a meaningful transparency and response-readiness gap.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
yiisoft/yii2 Version ~2.0 | — | — |
bitwasp/bitcoin Version * | — | — |
endroid/qr-code Version ~3.1 | — | — |
paypal/rest-api-sdk-php Version ~1.0 | — | — |
picqer/php-barcode-generator Version ~0.2.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.