This is a well-scaffolded but very new package: the v0.1.0 release was published only minutes ago, so there is not yet evidence of sustained maintenance, release cadence, or adoption. Its MIT licensing, complete README/tests/changelog, focused dependency profile, security policy, matching organization-owned repository, and non-deprecated/non-archived status are positive indicators. The main concerns are immature release history, absent repository security scanning, and a CI workflow without explicit top-level token permissions; these warrant review before production adoption, especially because the SDK handles payment and webhook functionality.
68%
Total Score
100
100
78
90
We didn't find any vulnerabilities for this package.
No direct dependencies.
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.