ascorak/m2-core
Its tests, changelog, release notes, and simple Composer dependency set improve transparency. All workflow actions are unpinned, and the repository has no security-scanning setup or security policy.
58%
Total Score
50
100
81
67
Health Score Breakdown
The repository is owned by an individual account rather than an organization, so there is no visible organizational backing to compensate for the thin maintenance history.
This is a 376-day-old package with only one release and no releases in the last 12 months, so continued maintenance is unproven.
There were no commits and no active maintainers in the last three months, a meaningful sign that maintenance may have stalled.
The repository has zero stars and forks and only one watcher. Popularity is not decisive, but this provides little supporting evidence of wider review or use.
The project uses Composer, but no security-scanning tools were detected, leaving an avoidable repository hygiene gap.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
No maintainer information available.
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 magento/framework Version >=103.0.4 | — | — |
magento/module-payment Version >=100.4.4 | — | — |
Weekly Downloads
Info
- Last Published
- 1 year ago
- Created
- 1 year ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.