Clear licensing and a matching organization-backed repository help. Long-term inactivity and the single-release history make future fixes and compatibility work uncertain. It lacks tests, a changelog, and security scanning.
42%
Total Score
50
75
50
The package has made one release, on November 20, 2022, with none in the last 12 months and roughly three years and ten months since publication. This strongly raises abandonment and compatibility risk.
The repository recorded zero commits and zero active maintainers in the last three months, consistent with the long gap since its last push. No provided activity signal compensates for this maintenance risk.
The artifact has no README, tests, or changelog, but the absence of tests and a changelog is normal for published packages; the exact version does have a GitHub release. The missing README is a minor consumer-documentation gap for a library module.
Composer build tooling is present, but no security scanning tools are reported. The build setup is appropriate, while the missing scanning adds a modest maintenance and assurance gap.
The linked repository has no security policy. This reduces transparency for reporting and handling vulnerabilities, though it is a hygiene concern rather than evidence of an immediate defect.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
magento/framework Version * | — | — |
ghostunicorns/module-crt-base Version ^1.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.