The README clearly documents a narrowly scoped local-development module and its source mirror. MIT licensing, a stable release, and no install-time scripts are reassuring. Its small maintainer base and limited maintenance history warrant pinning this release and monitoring updates.
58%
Total Score
50
100
88
83
One registry maintainer is responsible for publishing the package, leaving a thin publishing base for a user-owned project.
The repository is owned by a user account rather than an organization, providing no visible organizational backing to offset the single-maintainer base.
The package is only 156 days old and has two releases, both published within about two hours; this provides limited evidence of sustained maintenance.
The repository recorded zero commits and zero active maintainers in the last three months, so ongoing maintenance is not yet demonstrated beyond the initial release period.
Composer is used as the build tool, but no security scanning tools are configured, leaving a modest transparency and maintenance gap.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
magento/framework Version >=103.0 | — | — |
magento/module-theme Version * | — | — |
magento/module-config Version * | — | — |
magento/module-backend Version * | — | — |
jeanmarcos/module-core-local-development Version ^1.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.