The package has a clear MIT declaration and no install-time scripts, but its README still labels the project work in progress. Its single-user ownership, absent security scanning, and minimal project footprint leave little evidence of ongoing support.
45%
Total Score
50
67
75
Only three releases have been published since January 2017, with no releases in the last 12 months and a median interval of about 2.8 years. The latest release was in September 2022, indicating a long-standingly slow cadence.
The package has one registry maintainer, Tomas Majer, and the linked repository is owned by the same individual. This is a thin support base, especially alongside the lack of recent repository activity.
The artifact includes a README, but its 61-character content says the project is “Work in progress.” Missing tests and a changelog are normal packaging gaps, yet the README's explicit status makes maturity and consumer confidence a concern.
The repository recorded zero commits and zero active maintainers in the last three months, consistent with the package's long gap since its latest release. The repository is not archived, which is a limited compensating signal but does not demonstrate active maintenance.
Composer is used as the build tool, but no security scanning tools are configured. This is a modest transparency and maintenance-hygiene gap rather than evidence that the release is unsafe.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
omnipay/common Version ~3.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.