22%
Total Score
critical
Unfit to use: the registry marks this package as abandoned.
The package is marked abandoned at the registry for the whole package, with a replacement listed. This is a severe dependency risk even though the linked repository remains available.
The artifact declares MIT and includes a license file, but the repository license is detected as OSL-3.0. This mismatch creates a meaningful licensing ambiguity for consumers.
Only 3 releases exist over about 5 years, with no release in roughly 17 months and no releases in the last 12 months. That indicates a sparse and currently stalled release cadence.
There were no commits and no active maintainers in the last 3 months. That weakens evidence of ongoing maintenance despite the recent repository push.
The repository uses Composer, appropriate for this package, but reports no security-scanning tooling. This is a minor hygiene gap rather than a standalone dependency blocker.
We didn't find any vulnerabilities for this package.
| Version | Published | Vulnerabilities |
|---|---|---|
| 2.0.1 | 9 Apr 2025 | 0 0 critical, 0 total 0 0 high, 0 total 0 0 medium, 0 total 0 0 low, 0 total |
| 2.0.0 | 19 Dec 2024 | 0 0 critical, 0 total 0 0 high, 0 total 0 0 medium, 0 total 0 0 low, 0 total |
| 1.0.0 | 29 Oct 2021 | 0 0 critical, 0 total 0 0 high, 0 total 0 0 medium, 0 total 0 0 low, 0 total |
| Dependency | Last Release | Score |
|---|---|---|
qoliber/m2-datapatchcreator Version * | — | — |
markshust/magento2-module-simpledata Version * | — | — |
Secure your code, cloud, and runtime in one central system. Connect a repo to discover what the reasoning agents find in your codebase.
No credit card required | Scan results in 32 seconds.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.