Automated Security Evaluator -- CVE monitoring for Magento / Adobe Commerce / Mage-OS stores. Polls KEV/NVD/GHSA/OSV/Packagist, prioritizes with CVSS+EPSS+KEV, alerts via Slack.
68%
Total Score
caution
Usable with caveats: only one release and no commits in the last three months limit maintenance evidence.
The registry namespace and repository owner match, but the owner is an individual rather than an organization, so there is limited evidence of institutional backing.
The package is 154 days old with only one release, so there is little release history from which to judge sustained maintenance.
The repository recorded zero commits and zero active maintainers in the last three months, weakening evidence of ongoing maintenance despite a recent push timestamp.
The sole workflow was fully analyzed with no untrusted triggers, injection findings, or high-severity issues. Both action references are unpinned, leaving a modest supply-chain hygiene gap.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
composer/semver Version ^3.4 | — | — |
monolog/monolog Version ^3.10 | — | — |
vlucas/phpdotenv Version ^5.6 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.