The project has tests, release notes, a matching repository, and active organization ownership. Its registry releases have stopped since May 2024, while recent source activity consists of one commit from a single contributor and no security policy is published.
68%
Total Score
67
100
94
75
The package has 95 releases over roughly 10 years, but no registry release in the last 12 months and its latest release was in May 2024, indicating a materially slowed release cadence.
All recent commit activity comes from one contributor, concentrating short-term maintenance responsibility and increasing continuity risk.
Only one commit was recorded in the last three months, so current maintenance activity is limited even though the repository was recently updated.
The repository has no published security policy, leaving vulnerability reporting and response expectations unclear.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
omnipay/common Version ~2.0 | — | — |
composer/ca-bundle Version ^1.1 | — | — |
vimeo/payment-gateway-logger Version ^1.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.