This release appears usable and reasonably maintained, with eight releases over about 568 days, two releases in the last 12 months, recent repository activity, a non-archived organization-owned repository, clear licensing, tests, and no install-time lifecycle scripts. The main concerns are that it remains a 0.x release, all nine recent commits came from one contributor, the repository has minimal public adoption, and it lacks a security policy and security-scanning tooling. These issues warrant review and monitoring, but the observed maintenance and project backing keep it out of the unhealthy range.
72%
Total Score
88
100
83
90
One contributor made all nine commits in the last three months, creating a clear continuity risk; organization ownership provides some potential handoff capacity but does not remove the observed concentration.
The repository has only 1 star, 1 fork, and 0 watchers, which provides little independent evidence of broad adoption; popularity is supporting evidence rather than decisive for a small integration.
Composer build tooling is present, but no security-scanning tools are configured. The missing scanning is a hygiene gap, not by itself evidence that the package is unsafe.
No SECURITY.md or equivalent security policy was found, leaving vulnerability-reporting and response expectations less transparent.
Version 0.4.0 is not a stable major release, so consumers should expect possible breaking changes before 1.0.0; it is nevertheless a normal stable, non-prerelease version.
We didn't find any vulnerabilities for this package.
No maintainer information available.
| Dependency | Last Release | Score |
|---|---|---|
magento/framework Version * | — | — |
magento/module-ui Version * | — | — |
magento/module-email Version * | — | — |
magento/module-quote Version * | — | — |
magento/module-sales Version * | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.