Clear documentation, repository tests, licensing, and recent activity support adoption. The release workflow still uses unpinned actions, so updates should be monitored carefully.
68%
Total Score
75
100
89
100
The package is young at 65 days, with two releases and a median interval of about 25 days. This shows initial activity but provides limited evidence of long-term maintenance.
One contributor made all five commits in the last three months, leaving maintenance highly dependent on a single person.
The repository has one star and one fork, indicating limited external adoption. This is supporting context rather than a health verdict, especially for a young package.
Both workflows were fully analyzed with no detected audit findings or untrusted execution sinks. However, all 10 action references are unpinned and one workflow grants top-level write permissions, creating a workflow-hygiene caution.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
magento/framework Version ^103.0.4 | — | — |
magento/module-cron Version ^100.4.4 | — | — |
magento/framework-bulk Version ^101.0.1 | — | — |
magento/module-backend Version ^102.0.4 | — | — |
magento/module-indexer Version ^100.4.4 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.