A clear license, readable documentation, release notes, and an organization-owned repository provide useful transparency. The short history and concentrated activity leave maintenance capacity unproven.
67%
Total Score
67
100
90
100
The package is only 27 days old and has one release, so there is too little history to demonstrate sustained maintenance or long-term stability.
All recent commits come from one contributor. Organization ownership provides some handoff capacity, but no second active contributor is shown.
Only one commit was recorded in the last 3 months from one active maintainer, so there is evidence of recent activity but not of a sustained maintenance cadence.
We didn't find any vulnerabilities for this package.
No maintainer information available.
| Dependency | Last Release | Score |
|---|---|---|
magento/framework Version ^103|^104 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.