The organization-backed repository includes release notes and clearly identifies the package. Licensing and install behavior are straightforward, while the very young project leaves little evidence of long-term maintenance.
67%
Total Score
100
100
86
75
The package has only 3 releases, all published within minutes on its first day, so there is not yet evidence of sustained release maintenance.
Composer build tooling is present, but no security scanning tool was detected, leaving a modest repository hygiene gap.
The repository has no security policy, which weakens its documented process for reporting payment-related vulnerabilities.
The only workflow was fully analyzed with no audit findings and scopes permissions at job level, but its single action reference is unpinned, leaving a supply-chain hygiene gap.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
craftcms/cms Version ^5.0.0 | — | — |
craftcms/commerce Version ^5.0.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.