Is @vendure/payments-plugin safe to use?

@vendure/payments-plugin has no known vulnerabilities on the latest version (3.5.6). DepScope rates its health at 70/100 (moderate risk).

What is the latest version of @vendure/payments-plugin?

The latest version of @vendure/payments-plugin is 3.5.6, released 2026-03-30.

Does @vendure/payments-plugin have known vulnerabilities?

No known vulnerabilities on the latest version of @vendure/payments-plugin.

Is @vendure/payments-plugin deprecated?

No, @vendure/payments-plugin is actively maintained. Latest release: 3.5.6 (2026-03-30).

What are alternatives to @vendure/payments-plugin?

Popular alternatives to @vendure/payments-plugin in npm include: semver, debug, ansi-styles, minimatch, brace-expansion.

What license does @vendure/payments-plugin use?

@vendure/payments-plugin is licensed under GPL-3.0-or-later.

@vendure/payments-plugin

npmv3.5.6

> **Deprecation Notice:** This package is moving to > [`@vendure-community/payments-plugin`](https://github.com/vendurehq/community-plugins). > The `@vendure/payments-plugin` package will be removed in Vendure v3.6.0. > Please update your dependencies to

License GPL-3.0-or-later405 versions4 maintainers1 deps2,881 weekly dl

vendurehq/vendure

/ 100

Health

safe to use

@vendure/[email protected] is safe to use (health: 70/100)

Health breakdown0 – 100

20/25

maintenance

6/20

popularity

25/25

security

15/15

maturity

4/15

community

Vulnerabilities

none known

Bundle & TypeScript

📦

Bundle Size

0.3 KBminified

0.2 KB gzipped

1 direct dependencies

side effectsscoped

🌟

TypeScript

10/10typed

bundled

Health History

Dependency Tree

License Audit

Dependencies (1)

currency.js

API access

Get this data programmatically — free, no authentication.

curl https://depscope.dev/api/check/npm/@vendure/payments-plugin