The source repository is not archived and was pushed recently, with a small dependency surface and a documented license. The package is marked abandoned, and repository activity has stopped for the latest three months; use the listed replacement instead.
22%
Total Score
50
100
58
83
Packagist marks the entire package abandoned and provides qoliber/m2-datapatchcreator-pagebuilder-compatibility as the replacement, making this release unfit despite other healthy signals.
The artifact declares MIT and includes a license file, but the repository license file is detected as OSL-3.0; the mismatch creates a meaningful licensing ambiguity.
The package has only four releases since October 2021 and none in the last 12 months; its latest release was over a year ago, indicating limited ongoing release maintenance.
The repository recorded zero commits and zero active maintainers in the latest three months, which weakens the evidence of continuing maintenance even though it was pushed more recently overall.
The repository name does not match the package name and its README does not mention this package, so the link between the published package and source repository is not clearly established.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
qoliber/m2-datapatchcreator Version * | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.