Healthy and suitable to adopt, with some caveats. It is actively releasing, backed by an organization, and has matching source files and tests, but the project is only 35 days old and all recent repository commits come from one contributor.
76%
Total Score
70
100
88
88
The package is young at 35 days, but it has already had 9 releases, including 8 in the last 12 months, with releases roughly 1 day apart; this shows active iteration but limited long-term history.
All 2 recent commits came from one contributor, creating concentration risk; organization backing provides some handoff potential, but no second active contributor is shown.
The repository has 2 commits in the last 3 months and was recently updated, which indicates activity but not yet a substantial maintenance record.
There are no open issues or pull requests, but there is also no recent issue or pull-request activity to demonstrate an active support channel.
Composer build tooling is present, but no security scanning tools are reported, leaving a security-hygiene gap.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
magento/framework Version * | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.