Zero for Magento Open Source: one reminder email for a cart left with items in it.
72%
Total Score
caution
This first-day release has no maintenance track record yet, though its repository and package contents are well documented.
This is the package's first release, published today, so there is no release history to demonstrate sustained maintenance or maturity.
The repository has no commits or active maintainers in the last three months, but the package itself was published today, so this is limited evidence rather than abandonment.
Composer build tooling is present, but no security scanning tools were detected; this is a modest transparency gap rather than a severe risk.
The repository has no published security policy, leaving vulnerability-reporting expectations unclear for a package intended for Magento installations.
No GitHub Actions workflows were present to audit. This provides no workflow risk evidence, but it also offers no automated build or security-maintenance evidence.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
magento/framework Version 103.0.* | — | — |
magento/module-cron Version * | — | — |
magento/module-email Version * | — | — |
magento/module-quote Version * | — | — |
magento/module-store Version * | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.