Zero for Magento Open Source: "Tell me when it's back" on sold-out products, for any visitor, and one email when it is.
68%
Total Score
caution
A brand-new package with no observed commit activity yet and limited security-process evidence.
This package is only 0 days old with 3 releases, all published within roughly 4 hours, so it has almost no established maintenance history yet.
There were 0 commits and 0 active maintainers in the last 3 months, but the package itself is only 0 days old; this limits evidence of sustained maintenance rather than proving abandonment.
Composer is used as the build tool, but no security-scanning tools are configured, leaving a modest process gap for a package with application-facing code.
The repository has no security policy, so users have no documented security-reporting process. This is a transparency gap, not evidence that the code is unsafe.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
magento/framework Version 103.0.* | — | — |
magento/module-cron Version * | — | — |
magento/module-email Version * | — | — |
magento/module-store Version * | — | — |
magento/module-config Version * | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.