The module is clearly packaged and includes usable installation instructions, with a license file and no install-time scripts. Its only release was about 8 years ago, repository activity has stopped, and the linked repository does not identify this package, making maintenance and provenance uncertain.
38%
Total Score
25
100
63
83
This package has only one release, published about 8 years ago, with no releases in the last 12 months. That is strong evidence of abandonment for a Magento shipping integration that may need ongoing platform compatibility.
There were no commits and no active maintainers in the last 3 months, consistent with a repository whose last push was about 8 years ago. This materially increases abandonment risk.
The linked repository name does not match the package name and its README does not mention this package. Because this is not explained by an evident monorepo relationship, the package's source provenance is uncertain.
The linked repository is owned by an individual user rather than an organization, so there is no provided evidence of broader project backing to compensate for the thin maintenance record.
The repository has only 1 star and 1 fork, providing little evidence of a broad user or contributor base. Low popularity is supporting evidence rather than a verdict by itself.
We didn't find any vulnerabilities for this package.
No maintainer information available.
No direct dependencies.
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.