35%
Total Score
unhealthy
No releases or commits have appeared since January 2025, leaving this young package effectively abandoned.
The package is 629 days old with three releases, but it has had no releases in the last 12 months and its releases were concentrated within minutes in January 2025. This indicates a stalled release history for a young package.
There were zero commits and zero active maintainers in the last three months, consistent with the last push occurring in January 2025. For a package this young, the prolonged absence of development is a strong abandonment concern.
The repository has zero stars and forks and only one watcher. Popularity is supporting evidence rather than a verdict, but these figures offer no additional evidence of an active user or contributor community.
Composer is used as the build tool, but no security scanning tools are configured. The missing scanning is a hygiene concern, not as serious as the absence of maintenance activity.
The repository has no security policy or documented security-reporting path. That reduces transparency for a payment-related client and is not compensated by the available repository signals.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
psr/log Version ^3.0 | — | — |
brick/math Version ^0.12.1 | — | — |
psr/http-message Version ^2.0 | — | — |
webmozart/assert Version ^1.11 | — | — |
guzzlehttp/guzzle Version ^7.9 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.