The package has had no release or commit activity for nearly five years, and only one registry maintainer is listed. It is licensed, documented, non-deprecated, and has a linked unarchived repository, which limits the maintenance concern but does not remove it.
58%
Total Score
50
100
92
100
One registry maintainer is listed, which leaves limited publishing capacity; the linked repository is also owned by an individual rather than an organization, so no broader backing is shown.
The latest release was in September 2021, with no releases in the last 12 months; this indicates a long period without published maintenance for a Magento extension.
The repository recorded zero commits and zero active maintainers in the last three months, consistent with the package's extended release gap and raising abandonment risk.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
magento/framework Version 103.0.* | — | — |
magento/module-sales Version 103.0.* | — | — |
magento/module-config Version 101.2.* | — | — |
magento/module-shipping Version 100.4.* | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.