The package has a README, tests, release notes, an Apache-2.0 license, and organization backing. Its workflow also uses Dependabot, though its security policy is missing and its CI uses unpinned actions.
42%
Total Score
50
70
50
The latest release was in July 2021, with no releases in the last 12 months; this is a strong abandonment concern for a Magento payment integration.
The repository had zero commits and zero active maintainers in the last three months, reinforcing that development has stopped rather than merely slowed.
The release includes a substantial README, tests, and release notes, which improve transparency, but the README explicitly describes the extension as unsupported and early-stage.
There were no new or closed issues or pull requests in the last month, while seven pull requests remain open; this suggests limited ongoing project stewardship.
The linked repository has no security policy. This is a transparency and vulnerability-reporting gap, although it is partly offset by the repository using Dependabot.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
magento/framework Version ^100.1||^101.0||^102.0||^103.0 | — | — |
magento/module-checkout Version ^100.0 | — | — |
swedbank-pay/magento2-core Version ^1.5 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.