The package is packaged clearly, with tests, a README, and an explicit license. Missing security tooling and very low repository engagement add uncertainty for a Magento integration.
43%
Total Score
67
75
This is a single-release package: its only release was in May 2020, with no releases in the following six years. That is strong evidence of abandonment risk for a framework integration.
The repository has 0 stars and 0 forks, with only 1 watcher. Popularity is not decisive, but these figures provide little supporting evidence of an active user or maintainer community.
The repository is not archived, which is a modest positive, but it was last pushed in May 2020 and therefore does not offset the long period without maintenance.
The repository has no security policy. This is a transparency and maintenance gap, though it is less serious than the absence of releases or ongoing code activity.
We didn't find any vulnerabilities for this package.
No maintainer information available.
| Dependency | Last Release | Score |
|---|---|---|
filp/whoops Version ^2.1 | — | — |
magento/framework Version ~101.0|~102.0 | — | — |
symfony/stopwatch Version ^2.8 || ^3.0 || ^4.0 || ^5.0 | — | — |
symfony/var-dumper Version * | — | — |
jdorn/sql-formatter Version ^1.2 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.