The MIT license, focused dependency set, and matching repository make the package straightforward to inspect. Its only registry release is nearly six years old, while recent repository activity has not produced a new release.
55%
Total Score
67
100
88
83
There has been only one release, published nearly six years ago, with no releases in the last 12 months. This materially raises staleness and abandonment risk despite the linked repository remaining available.
No commits or active maintainers were recorded in the last three months. This weakens the recent-push evidence and reinforces concern that the released package is not being actively maintained.
One issue and one pull request remain open, while none were created or closed in the last month. This is a mild sign of limited project activity, not evidence of severe abandonment by itself.
Composer is used as the build tool, but no security-scanning tooling is configured. The missing scanner is a modest repository-hygiene gap rather than a dependency-health verdict.
The repository has no published security policy, reducing transparency about vulnerability reporting and response expectations.
We didn't find any vulnerabilities for this package.
No maintainer information available.
| Dependency | Last Release | Score |
|---|---|---|
magento/framework Version 102.0.* | — | — |
magento/module-ui Version 101.1.* | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.