Package Health

pronamic/pronamic-pay-worldline-direct-hosted-checkout

Clear documentation, recent releases, and active work from two contributors support ongoing maintenance. The licensing mismatch and absent security policy leave modest transparency gaps.

Latest v1.6.0PackagistPackagist

84%

Total Score

Maintainer Stability
Maintainer Stability
Assesses the consistency and reliability of package maintainers

100

Maturity
Maturity
Indicates package age, release frequency, and adoption metrics

88

Supply Chain
Supply Chain
Evaluates supply chain security practices and risks

75

Health Score Breakdown

Licensecaution

The artifact contains a GPL-3.0 license file, while the manifest declares GPL-2.0-or-later; because the detected license is not covered by the declaration, this creates a concrete licensing clarification risk.

Repo toolingcaution

Composer build tooling is present, but no security-scanning tool was detected. This is a modest transparency and maintenance gap rather than evidence of unsafe code.

Security policycaution

The repository has no SECURITY.md or other detected security policy, leaving vulnerability-reporting expectations and response processes undocumented.

Vulnerabilities

We didn't find any vulnerabilities for this package.

Package versions

Maintainers

No maintainer information available.

Direct Dependencies

DependencyLast ReleaseScore
wp-pay/core
Version ^4.34
—
—
pronamic/wp-http
Version ^1.2
—
—
pronamic/pronamic-wp-updater
Version ^1.0
—
—
automattic/jetpack-autoloader
Version ^2.0 || ^3.0 || ^4.0 || ^5.0
—
—

Weekly Downloads

Info

Last Published
1 month ago
Created
10 months ago

Are You Affected?

Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.

Free. No credit card required.

Aikido Platform