Usable with caveats: the package is licensed, not deprecated, and has a matching source repository, but it has had no release or commit activity for nearly three years. Its tiny repository has no tests, changelog, or security policy, so maintenance and verification are limited.
58%
Total Score
25
100
67
83
There were zero commits and zero active maintainers in the last three months, consistent with the repository's last push nearly three years ago. This is the strongest maintenance concern and raises abandonment risk.
A README and release notes for version 0.3 are present, but the README is only 17 characters and the repository has no tests or changelog. Missing tests and changelog are not inherently problematic for a published package, while the minimal consumer documentation is a modest transparency gap.
The registry namespace and repository owner match, providing direct ownership alignment, but the backing is an individual user rather than an organization and there is no activity evidence showing sustained maintenance capacity.
The package has only three releases since March 2021 and none in the last 12 months; the latest release was on October 23, 2023. This indicates a slow and currently inactive maintenance history.
The repository has zero stars and forks and only one watcher. Popularity is not required for a healthy small package, but these counters provide little supporting evidence of community use or review.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
league/omnipay Version ^3.1.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.