Risky to adopt: the latest release is over 12 years old and the repository has had no commits or active maintainers in the observed period. It has tests, a README, a license file, and no install-time scripts, but the payment integration appears effectively abandoned.
35%
Total Score
0
100
64
75
The package has had no release in over 12 years, with all four releases clustered on 19 January 2014. That severely weakens confidence that compatibility and maintenance needs are being addressed.
The repository recorded zero commits and zero active maintainers during the last three months, consistent with the long release gap and indicating no current maintenance capacity.
The repository has zero stars, one fork, and one watcher, providing little supporting evidence of broad review or an active user community. Popularity is only supporting evidence, so this reinforces rather than determines the negative maintenance assessment.
The repository uses Composer build tooling, but no security scanning tools were found. The tooling is adequate for packaging, while the missing scanning is a minor transparency gap on an otherwise inactive project.
The repository is not formally archived, but its last push was over 12 years ago. The lack of archival status does not compensate for the observed inactivity.
We didn't find any vulnerabilities for this package.
No maintainer information available.
No direct dependencies.
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.