The package has clear licensing, a focused dependency set, useful installation documentation, and no install-time scripts. It is still a young single-release project with no commits in the last three months and no security policy, so long-term maintenance is not yet established.
68%
Total Score
67
100
88
83
One registry publishing account is consistent with a small user-backed project, but it also indicates a limited publishing base.
Only one release exists, published 219 days ago, so there is little release history from which to judge maintenance consistency.
The repository recorded zero commits and zero active maintainers in the last three months, which weakens evidence of active maintenance for a package with only one release.
The repository uses Composer, appropriate for this package, but no security scanning tools were detected.
No repository security policy was found, leaving vulnerability-reporting expectations undocumented.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
magento/framework Version 103.0.* | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.