Usable with caveats: the release is documented, not deprecated or archived, and its repository matches the package description. It has only one release and no commits in the last three months, with no security policy, so ongoing maintenance and security support are uncertain.
58%
Total Score
33
100
83
88
The repository recorded zero commits and zero active maintainers in the last three months. With only one release, this is the strongest indication that ongoing maintenance may be limited.
The repository is owned by a user account rather than an organization, so the available backing signal does not show organizational maintenance capacity.
This package has only one release, published about 6 months ago, so there is little history demonstrating sustained maintenance or release reliability.
There were no new issues or pull requests in the last month, and the available issue count is unknown; this provides little evidence of active community support.
The repository has only 1 star and no forks or watchers, indicating limited visible adoption and community support. Popularity is supporting evidence rather than decisive on its own.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
magento/framework Version >=102.0.0 | — | — |
magento/module-sales Version * | — | — |
magento/module-config Version * | — | — |
magento/module-payment Version * | — | — |
magento/module-checkout Version * | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.