Doofinder module for Magento 2
84%
Total Score
healthy
Healthy overall, with all 11 GitHub Actions references unpinned as the main caveat.
Post-install and post-update Composer scripts run during installation, creating operational and supply-chain exposure beyond ordinary file installation.
The repository uses Composer and Make, but no security scanning tooling was detected, leaving a modest assurance gap.
No repository security policy was found, which makes vulnerability reporting and response expectations less transparent.
All five workflows were analyzed without detected audit findings and three scope permissions at job level, but all 11 action references are unpinned, weakening build reproducibility.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
guzzlehttp/guzzle Version * | — | — |
magento/framework Version >=101.0.6 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.