Usable with caveats: it is actively released, non-deprecated, and backed by an organization, but the project is young and all recent commits come from one contributor. The missing license, tests, changelog, and security policy reduce transparency and confidence for a checkout module.
62%
Total Score
67
100
72
83
No license declaration or license file was found in the package or repository, leaving the terms for use and redistribution unclear.
The package includes a README and the repository uses GitHub Releases, but neither the artifact nor repository has tests or a changelog. For a checkout integration, the lack of visible tests is a meaningful maintenance and regression concern.
The package is only 195 days old with four releases, released about every 36 days on average. This shows ongoing publishing but provides limited evidence of long-term maturity.
One contributor made all four commits in the last three months. Organization ownership provides some handoff capacity, but the observed maintenance activity remains concentrated.
The repository had four commits in the last three months, showing recent maintenance, but the volume is modest for a production checkout integration.
We didn't find any vulnerabilities for this package.
No maintainer information available.
| Dependency | Last Release | Score |
|---|---|---|
magento/module-checkout Version ^100.4 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.