Zero for Magento Open Source: a blog: posts written in the Zero CMS editor, categories, tags, authors, products in posts, comments.
68%
Total Score
caution
A brand-new package has no established release or commit track record yet.
The package is 0 days old with only 3 releases, all published within about 2 hours; this provides too little history to establish durable maintenance, despite the stable 1.1.0 version.
The repository reports 0 commits and 0 active maintainers in the last 3 months. Because the package is newly published and was pushed today, this is evidence of unproven maintenance rather than abandonment, but it still lowers confidence.
Composer build tooling is present, but no security-scanning tools were detected. That is a process gap for a package intended for production Magento installations, without proving the code is unsafe.
The repository has no security policy. This weakens vulnerability-reporting transparency, though it is a hygiene concern rather than a severe dependency risk.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
magento/framework Version 103.0.* | — | — |
magento/module-ui Version * | — | — |
magento/module-cms Version * | — | — |
magento/module-store Version * | — | — |
magento/module-config Version * | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.