This is a mature, actively maintained release with a decade-long history, 120 releases, 19 releases in the last 12 months, a stable major version, current repository activity, and organization backing from Algolia. The package and repository contain substantial documentation, tests, a changelog, build scaffolding, and a clear matching source repository; licensing and dependency metadata are also present. The main reservations are the absence of repository security scanning and a security policy, plus a small contributor base, although recent activity is strong and nearly evenly split between two primary contributors. Overall, it appears suitable to depend on, subject to normal review of its Magento and third-party service integration risks.
91%
Total Score
100
100
94
90
Composer build tooling is present, supporting reproducible project management. No security scanning tools were detected, leaving a security-process gap that modestly lowers transparency.
The repository has no security policy. This is a genuine disclosure and vulnerability-response transparency gap, though it is not evidence that the package is unsafe or abandoned.
| Title | Versions | Severity |
|---|---|---|
AIKIDO-2025-10600 Pre-CVE Found by Aikido Intel before public disclosure or CVE publication. algolia/algoliasearch-magento-2 is vulnerable to Cross Site Scripting (XSS) in versions 1.0.0 - 3.15.1. | 1.0.0 - 3.15.1 | Medium |
AIKIDO-2024-10391 Pre-CVE Found by Aikido Intel before public disclosure or CVE publication. algolia/algoliasearch-magento-2 is vulnerable to Cross-site Scripting (XSS) in versions 0.8.0 - 3.13.3. | 0.8.0 - 3.13.3 | Medium |
No maintainer information available.
| Dependency | Last Release | Score |
|---|---|---|
guzzlehttp/guzzle Version ^7.15.2 | — | — |
magento/framework Version ~103.0 | — | — |
algolia/algoliasearch-client-php Version ^4.40.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.