The package is small and its README explains installation and use. It has no tests, security policy, or security scanning, so maintenance and accountability are limited.
44%
Total Score
25
71
83
This is the package's only release, published over five years ago, with no releases in the last 12 months. That strongly indicates abandonment risk for a Magento integration.
The repository has had no commits or active maintainers in the last three months, consistent with the package having received no updates since July 2021.
Neither the package metadata nor the artifact or repository contains a license. Developers lack clear permission to use, modify, or redistribute the module.
Only one registry maintainer account is listed. The linked repository is owned by a user account rather than an organization, so there is little visible maintainer redundancy.
Composer is used for the build, which fits the package ecosystem, but no security scanning tools are configured. This is a modest transparency and maintenance gap.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
magento/framework Version 103.0.* | — | — |
magento/module-eav Version 102.1.* | — | — |
magento/module-store Version 101.1.* | — | — |
magento/module-search Version 101.1.* | — | — |
magento/module-catalog Version 104.0.* | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.