Its README, tests, changelog, MIT license, and repository linkage provide a solid starting point. Zero stars and no security tooling or policy leave limited independent evidence for an API handling payments.
68%
Total Score
100
100
75
75
The package was first released on the assessment date and has only three releases, all within about 5 hours, so long-term maintenance is not yet demonstrated.
The repository has zero stars, forks, and watchers. Because the package is brand new this is limited evidence rather than proof of poor quality, but it provides no external adoption signal yet.
Composer build tooling is present, but no security scanning tools were detected, leaving a meaningful repository hygiene gap for a payments SDK.
No repository security policy was found, reducing transparency about how users should report vulnerabilities in a package handling payment integrations.
Version v0.2.0 is not a stable major release, which indicates an early API that may still change substantially.
We didn't find any vulnerabilities for this package.
No maintainer information available.
| Dependency | Last Release | Score |
|---|---|---|
psr/http-client Version ^1.0 | — | — |
psr/http-factory Version ^1.0 | — | — |
psr/http-message Version ^1.1 || ^2.0 | — | — |
guzzlehttp/guzzle Version ^7.5 || ^8.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.