It has a clear README, a matching repository, and release notes for this version. The repository has no security policy or security-scanning tooling, limiting transparency and ongoing maintenance confidence.
42%
Total Score
0
75
75
The package is about 5 years old but has had no releases in the last 12 months; its five releases were concentrated in roughly 8 days in 2021, indicating a long-standing maintenance gap.
The repository recorded 0 commits and 0 active maintainers in the last 3 months, consistent with the last push occurring in July 2021 and leaving little evidence of current maintenance.
The repository has 0 stars and 0 forks with only 1 watcher. Popularity is supporting evidence rather than a verdict, but these numbers provide no community signal to offset the inactivity.
Composer build tooling is present, but no security-scanning tools were detected; this is a modest transparency and maintenance weakness rather than evidence of unsafe behavior.
The repository has no security policy, so there is no documented process for reporting or handling vulnerabilities in a package that integrates with a Magento store.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
magento/framework Version >=100.0.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.