Provides ajax cart functionality for the Drupal Commerce
58%
Total Score
caution
Usable with caveats: one release and no commits in the past three months limit maintenance evidence.
Neither the package nor the linked repository provides a declared or detected license or license file. This leaves the legal terms for use unclear and materially reduces transparency.
Only one release has been published, on January 22, 2026, so there is little release history to demonstrate sustained maintenance over the package's 245-day lifetime.
The repository recorded zero commits and zero active maintainers in the past three months. Since the only release was also on January 22, 2026, current maintenance capacity is unproven.
The repository has zero stars, forks, and watchers. Popularity is only supporting evidence, so this modestly limits external validation but does not determine health.
Composer is used as a build tool, which fits the PHP package, but no security scanning tools are configured. The missing scanner is a hygiene gap rather than evidence of abandonment.
We didn't find any vulnerabilities for this package.
No maintainer information available.
| Dependency | Last Release | Score |
|---|---|---|
drupal/core Version ^10 || ^11 | — | — |
drupal/commerce Version ^3.2 | — | — |
iqual/iq_commerce Version ^3.5 | — | — |
drupal/commerce_cart_api Version ^1.9 | — | — |
drupal/commerce_combine_carts Version ^1.1 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.