Hestaworks OrderEmailTester
38%
Total Score
unhealthy
A single release nearly seven years ago, a stale project, and a repository/package identity mismatch make this a risky dependency.
The package has only one release, published nearly seven years ago, with no releases in the last 12 months. That strongly suggests abandonment for a Magento integration package.
The artifact includes a license, but the manifest declares OSL-3.0 and AFL-3.0 while the detected license file is GPL-3.0. This licensing mismatch should be resolved before adoption.
The linked repository name does not match the package name and its README does not mention the package. Although subpackages can use monorepos, these results leave package provenance insufficiently clear.
The repository is not archived, but it was last pushed nearly seven years ago. This is consistent with the package's lack of release activity and provides little evidence of current maintenance.
We didn't find any vulnerabilities for this package.
No maintainer information available.
| Dependency | Last Release | Score |
|---|---|---|
magento/framework Version 102.0.* | — | — |
magento/module-ui Version 101.1.* | — | — |
magento/module-eav Version 102.0.* | — | — |
magento/module-user Version 101.1.* | — | — |
magento/module-quote Version 101.1.* | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.