The package includes a useful README, tests, and release notes, but it has no license or security policy. Its small user base and single registry maintainer provide little evidence of ongoing support.
42%
Total Score
25
100
75
88
Only two releases exist, and none were published in the last four years; the latest release was in June 2022. This is strong evidence of stalled maintenance for a payment-related SDK.
The repository recorded zero commits and zero active maintainers during the last three months, consistent with the long release gap and leaving little evidence of current maintenance capacity.
The package declares no license, contains no license file, and the linked repository has no license file. Developers may lack clear legal permission to use and redistribute the SDK.
The repository is owned by an individual account rather than an organization, so the single registry maintainer is not visibly supported by broader organizational backing.
The repository has two stars, one fork, and one watcher. This is limited adoption evidence, though popularity alone is not decisive.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
guzzlehttp/guzzle Version ^7.4.2 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.