The MIT license, included tests, and matching organization repository provide useful transparency. Maintenance stopped in December 2022, and the package is deprecated and archived, making it a poor long-term dependency.
12%
Total Score
50
50
Packagist marks the entire package as abandoned, with no replacement provided. This directly signals that dependents should not expect continued support.
The package has 5 releases, but none in the last 12 months; the latest release was December 3, 2022. The short early release intervals do not compensate for nearly 4 years without a release.
The repository recorded 0 commits and 0 active maintainers in the last 3 months, consistent with the archived state and showing no current maintenance capacity.
The linked repository is archived, and its last push was on December 3, 2022. An archived source project is a severe abandonment risk for a payment SDK.
Composer build tooling is present, but no security-scanning tools are reported. This is a maintenance and transparency gap, though it is secondary to the package being abandoned.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
guzzlehttp/guzzle Version ^7.4 | — | — |
symfony/serializer Version 5.* | — | — |
phpseclib/phpseclib Version ~3.0 | — | — |
symfony/property-access Version 5.* | — | — |
phpdocumentor/reflection-docblock Version 5.* | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.