This is a mature, stable package with a release history spanning about 5 years, 25 releases, and 10 releases in the last 12 months, and it is not deprecated or archived. The artifact includes documentation, tests, and substantial build and integration-test scaffolding, while the organization-owned repository provides meaningful project backing. However, the linked repository shows no commits or active maintainers in the last 3 months, has no security policy or security scanning, and does not match or mention the package name, creating transparency and maintenance concerns. The package is usable, but dependency adoption should account for the possibility that maintenance activity is currently concentrated elsewhere or has slowed.
65%
Total Score
83
100
78
90
No declared license or license file was found in the package or repository, leaving the legal terms for reuse unclear.
The repository recorded zero commits and zero active maintainers over the last 3 months, a meaningful maintenance warning that conflicts with the active release history and recent repository push.
The repository name does not match the package name and its README does not mention the package, creating a transparency concern about whether it is the authoritative source; organizational backing provides only partial context, not confirmation.
The repository has zero stars and forks and only three watchers, indicating limited public adoption; this is supporting caution rather than a verdict on health.
Composer and Phing build tooling are present, but no security scanning tools were detected, leaving a security-hygiene gap.
We didn't find any vulnerabilities for this package.
No maintainer information available.
| Dependency | Last Release | Score |
|---|---|---|
creativestyle/magesuite-build-composer-plugin Version ^1.0.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.