The MIT license, detailed README, matching repository, and organization ownership provide solid transparency and publishing context. The small project has no recent repository commits and only one release in the past year, so maintenance capacity is the main concern.
65%
Total Score
75
100
88
83
The package has existed for over seven years with 25 releases, but only one release in the past year indicates a slower maintenance pace.
The repository recorded no commits and no active maintainers during the past three months. This is a meaningful maintenance concern, although the current release was recently published.
Composer is used for builds, but no security scanning tools were detected. The missing scanning is a modest hygiene gap rather than evidence of abandonment.
The repository has no security policy, leaving vulnerability-reporting expectations unclear for an integration module.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
magento/framework Version 101.*|102.*|103.* | — | — |
datareporter/module-core Version ^1 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.