The package is only hours old, so its release and maintenance record is unproven. It has a declared OSL-3.0 license, no install scripts, and a matching source repository, while the font-focused artifact makes missing tests and README less important.
64%
Total Score
75
100
86
83
The package was first released only hours ago and has six releases in that short period, so there is not yet enough history to demonstrate sustained maintenance.
There were no commits from active maintainers in the last three months, but the repository and package are only hours old, so this is mainly a lack of history rather than evidence of a collapsed project.
Composer build tooling is present, but no security scanning tool was detected, leaving a minor repository hygiene gap.
The repository has no security policy, which provides less guidance for reporting vulnerabilities, though this is a modest transparency gap for a small font asset package.
We didn't find any vulnerabilities for this package.
No maintainer information available.
| Dependency | Last Release | Score |
|---|---|---|
magento/framework Version * | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.