gr4vy/magento
Recent repository activity is absent, and the registry shows no releases in the last 12 months. The package is licensed, documented, organization-backed, and its workflow audit is clean, but it lacks a security policy.
62%
Total Score
75
79
75
Health Score Breakdown
The package has 52 releases over about 5 years, but none in the last 12 months; this indicates a meaningful maintenance slowdown despite its previously regular release interval.
There were zero commits and zero active maintainers in the last 3 months, which weakens evidence of ongoing maintenance and increases abandonment risk.
Composer is used for builds, but no security scanning tools were detected, leaving a modest transparency and security-process gap.
The repository has no security policy, so consumers are not given a documented vulnerability-reporting path.
The assessed version is 1.2.2-beta while the reported latest version is 1.0.34 and the stability fields mark it as non-prerelease, creating release metadata inconsistency.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
 Gr4vy |
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 psr/log Version * | — | — |
gr4vy/gr4vy-php Version >=0.21.0 | — | — |
magento/framework Version >=101 <104 | — | — |
magento/module-config Version >=100 <103 | — | — |
magento/module-backend Version >=100 <103 | — | — |
Weekly Downloads
Info
- Last Published
- 2 years ago
- Created
- 5 years ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.