Dynamic scheduled sales, category promotions, custom promotional tags, and countdown timers for Craft Commerce 5.
64%
Total Score
caution
A well-documented initial release, but it has no demonstrated maintenance history yet and lacks security tooling.
Only one registry maintainer is listed. That is a limited publishing base for a user-owned project and leaves little visible redundancy if the maintainer becomes unavailable.
The registry namespace and repository are owned by the same individual account, providing ownership consistency but no organizational backing or maintainer redundancy.
The package was first released within the last day and has only two releases, so there is not yet enough history to demonstrate sustained maintenance or maturity.
There were no commits and no active maintainers in the preceding three months, but the repository is less than a day old, so this is mainly an absence of historical evidence rather than proof of abandonment.
Composer build tooling is present, but no security scanning tools are reported, leaving an avoidable security-process gap.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
craftcms/cms Version ^4.0.0 || ^5.0.0 | — | — |
craftcms/commerce Version ^4.0.0 || ^5.0.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.