The release includes tests, a changelog, and notes for this version. The organization-backed project is active, though recent work is concentrated in one contributor.
79%
Total Score
83
94
100
All five recent commits came from one contributor, giving the project a concentrated recent maintenance base. Organization backing partly reduces handoff risk, but no second active contributor is shown.
The repository name does not match the package name and its README does not mention the package, so the linkage is less transparent. The matching DHL-specific repository path reduces, but does not remove, that concern.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
magento/framework Version ^103.0.8 | — | — |
magento/module-ui Version ^101.2.8 | — | — |
magento/module-eav Version ^102.1.8 | — | — |
magento/module-quote Version ^101.2.8 | — | — |
magento/module-store Version ^101.1.8 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.