The package includes a substantial README, tests, changelog, matching license files, and no install-time scripts. Repository security scanning is absent, while the very recent project has no recorded commit activity yet.
58%
Total Score
67
100
83
83
The registry namespace and repository owner match, but the owner is an individual account rather than an organization, so there is no demonstrated organizational backing.
This is the package's first release, published 0 days ago, so there is no release track record to demonstrate sustained maintenance.
The repository records 0 commits and 0 active maintainers in the last 3 months; because the project is newly published, this is limited evidence rather than proof of abandonment.
The linked repository name does not match the package name and its README does not mention the package, leaving some uncertainty that it is the intended source repository.
Composer build tooling is present, but no repository security scanning tools are reported, leaving a modest project-hygiene gap.
We didn't find any vulnerabilities for this package.
No maintainer information available.
| Dependency | Last Release | Score |
|---|---|---|
magento/framework Version 103.0.* | — | — |
magento/module-store Version 101.1.* | — | — |
magento/module-config Version 101.2.* | — | — |
emacom/bot-shield-core Version ^1.0 | — | — |
magento/module-catalog Version 104.0.* | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.