The package includes tests, documentation, a matching MIT license, and a security policy. Its maintenance appears to have stopped about three years ago, and the linked repository does not identify or mention this package, which makes long-term support uncertain.
44%
Total Score
33
100
72
100
The last release was on December 9, 2022, with no releases in the last 12 months despite the package being about 3 years and 11 months old. This is strong evidence of abandonment for an integration package.
There were zero commits and zero active maintainers in the last three months, while the repository was last pushed in December 2022. This indicates maintenance has effectively stopped.
Four registry accounts or groups have publishing access, including community contributions, but these records describe access rather than demonstrated ongoing maintenance. The activity signals provide no evidence that this base is currently active.
The repository is owned by a user account rather than an organization, so there is no observed organizational backing to compensate for the thin maintenance record.
The repository name does not match the package name and its README does not mention pyrowman/stripe-v3. Although subpackages can use different names, this makes package ownership and publishing provenance less transparent.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
payum/core Version ^1.5 | — | — |
stripe/stripe-php Version ^7.105 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.