Its license file and matching source repository provide basic transparency. The single runtime dependency and lack of install-time scripts limit complexity, but there is no recent maintenance or security policy.
38%
Total Score
0
100
67
75
This package has only one release, published about 10 years ago, with no releases in the last 12 months. That is strong evidence of abandonment risk, despite the stable 1.1.0 version.
The repository recorded zero commits and zero active maintainers over the last 3 months, consistent with its last push in September 2016. No provided signal shows current maintenance capacity.
The artifact contains an MIT license file, but the manifest declares the package as Private. This mismatch creates licensing ambiguity even though a recognized license is present.
The repository has only 1 star and 2 forks, offering little supporting evidence of active community use. Popularity is not decisive, but it does not offset the stale maintenance record.
The linked repository has no security policy. For an old payment integration, this reduces transparency about how vulnerabilities are reported and handled.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
paypal/rest-api-sdk-php Version 1.5.* | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.