The package has a clear README, tests, a focused dependency set, and organization backing. Its workflow is auditable but uses three unpinned actions, and no security policy is published.
58%
Total Score
67
100
83
75
The package has only four releases and none in the last 12 months; its latest release was June 27, 2023, around three years ago. This is meaningful abandonment risk despite the short historical release intervals.
There were no commits and no active maintainers in the last three months, consistent with the repository's last push in June 2023. The lack of recent development materially raises maintenance risk.
Two issues remain open, with no issues or pull requests created or closed in the last month. This is a weak maintenance signal and does not independently establish abandonment.
The repository has zero stars and forks and only two watchers. Low popularity is supporting evidence rather than a verdict, but it provides little external adoption signal.
Composer build tooling is present, but no security-scanning tool was detected. This is a modest transparency and hygiene gap, partly offset by the repository's build configuration and tests.
We didn't find any vulnerabilities for this package.
No maintainer information available.
| Dependency | Last Release | Score |
|---|---|---|
league/omnipay Version ^3 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.