Its license is clear and the single runtime dependency keeps the footprint small. Missing security policy and documentation add friction for a payment integration.
38%
Total Score
50
100
50
50
The latest release was published in July 2020, about six years ago, with no releases in the last 12 months. That long gap is strong evidence of abandonment risk for a payment module.
The repository recorded no commits and no active maintainers in the last three months, while its last push was in July 2020. This confirms that maintenance has effectively stopped.
The package has no README, tests, or changelog, although missing tests and changelogs are normal for published Magento artifacts and a GitHub release exists for this version. The missing consumer documentation still matters for a payment integration.
No repository security policy was found. That is a transparency gap for a package handling payment integration, though it is not evidence of a security defect by itself.
Version 0.1.11 is not a stable major release, which signals limited maturity. The absence of prerelease labeling is mildly reassuring but does not offset the package's age.
We didn't find any vulnerabilities for this package.
No maintainer information available.
| Dependency | Last Release | Score |
|---|---|---|
watts25/naranja-payment-sdk Version ^0.1.4 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.