Zero for Magento Open Source: PayPal (Standard and Express) for Zero Checkout, without JavaScript on the shop's pages.
58%
Total Score
caution
A brand-new package has released three versions within hours, with no observed commit activity or security policy yet.
The package is less than one day old, with three releases in that period; this shows active initial publishing but provides no meaningful long-term maintenance history.
No commits or active maintainers were observed in the last three months. Because the repository is less than one day old, this is partly explained by its recency but still leaves maintenance capacity unestablished.
The repository has zero stars, forks, and watchers. That is weak adoption evidence, though the package's age makes the lack of popularity unsurprising and not independently severe.
Composer build tooling is present, but no security-scanning tool was detected, leaving a modest security-process gap for a package handling payment integration.
No repository security policy was found, reducing transparency for reporting and handling vulnerabilities in a payment-related module.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
magento/framework Version 103.0.* | — | — |
magento/module-quote Version * | — | — |
magento/module-sales Version * | — | — |
magento/module-store Version * | — | — |
magento/module-config Version * | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.