The small, clearly licensed artifact has minimal runtime dependencies and no install-time scripts. Its organization backing helps, but consumers should expect limited project-level documentation and security process.
68%
Total Score
67
100
80
50
The package has existed for about 7 years with 36 releases, but only 1 release appeared in the last 12 months, indicating a currently slow release cadence.
All recent activity comes from one contributor, creating concentrated maintenance capacity. The organization-owned repository provides some handoff potential, but no second active contributor is shown.
Only 1 commit was recorded in the last 3 months, showing limited recent maintenance activity, although it does confirm some current activity.
The repository has no security policy. This is a transparency gap, though the package is a small autogenerated translation artifact rather than a security-sensitive library.
Version 0.0.36 is not a stable-major release, which leaves more room for compatibility changes than a mature 1.x package; it is not marked as a prerelease.
We didn't find any vulnerabilities for this package.
No maintainer information available.
| Dependency | Last Release | Score |
|---|---|---|
magento/framework Version * | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.