This release appears usable and generally healthy: it has a stable version, 31 releases over roughly 19.5 months, 24 releases in the last 12 months, recent publication, an active non-archived organization-owned repository, a matching package repository, clear licensing, documentation, and no install-time lifecycle scripts. The main concerns are limited recent repository activity—only 2 commits from 1 contributor in the last 3 months—along with no repository security scanning, no security policy, no tests in either the artifact or repository, and very low repository popularity. These issues increase maintenance and assurance risk, but the frequent release cadence, organization backing, changelog, and current repository state provide meaningful compensation.
78%
Total Score
70
50
83
90
The package has 8 runtime dependencies, including Shopware components and its SDK; this is a meaningful integration surface but not unusually broad for a Shopware payment plugin.
A substantial README and changelog are present, and repository releases are used; tests are absent from both the artifact and repository, which leaves a genuine verification gap for this payment integration.
All 2 recent commits came from one contributor, creating a concentrated bus factor. Organization ownership partially compensates because maintenance can potentially be handed off internally, but no second active contributor is shown.
Only 2 commits were recorded in the last 3 months, all from one active maintainer. This is notably thin recent development activity despite the strong registry release cadence.
There were no new issues or pull requests and no merged pull requests in the last month; this is limited evidence of community activity, though the absence of issues is not by itself evidence of abandonment.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
shopware/core Version ~6.7.0 | — | — |
vrpayment/sdk Version ^4.8.1 | — | — |
shopware/storefront Version ~6.7.0 | — | — |
shopware/administration Version ~6.7.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.