shetabit/multipay
PHP Payment Gateway Integration Package
86%
Total Score
100
100
94
67
Health Score Breakdown
Composer and Make are used for project tooling, but no security-scanning tools were detected; this is a modest transparency and hygiene gap rather than evidence of abandonment.
The repository has no security policy, leaving vulnerability-reporting and response expectations undocumented for a payment integration library.
All three workflows use read-only permissions and have no detected dangerous triggers or audit findings, but all 13 action references are unpinned, leaving avoidable build-reproducibility risk.
Vulnerabilities
| Title | Versions | Severity |
|---|---|---|
AIKIDO-2025-10527 Pre-CVE Found by Aikido Intel before public disclosure or CVE publication. shetabit/multipay is vulnerable to Replay Attacks in versions 1.0.0 - 2.5.0. | 1.0.0 - 2.5.0 | High |
AIKIDO-2025-10518 Pre-CVE Found by Aikido Intel before public disclosure or CVE publication. shetabit/multipay is vulnerable to Replay Attacks in versions 1.0.0 - 2.3.0. | 1.0.0 - 2.3.0 | High |
Package versions
Maintainers
 Mahdi Khanzadi |
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 ramsey/uuid Version ^4.9 | — | — |
nesbot/carbon Version ^3.13 | — | — |
guzzlehttp/guzzle Version ^7.8.2|^8.0 | — | — |
chillerlan/php-cache Version ^5.1 | — | — |
Weekly Downloads
Info
- Last Published
- 22 days ago
- Created
- 6 years ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.