Its documentation and source packaging are in good shape, with a clear license and release notes. Pin 2.2.0 and verify compatibility with the Craft CMS version you run.
60%
Total Score
50
83
67
The latest registry release was on August 5, 2023, with no releases in the last 12 months. This long gap is a meaningful maintenance concern for a plugin dependency.
The repository had no commits and no active maintainers in the past three months, reinforcing the indication that maintenance has slowed substantially.
There were no new or closed issues and no merged pull requests in the past month, while four pull requests remain open. This suggests limited recent project activity.
The linked repository has no security policy. That reduces transparency for reporting and handling vulnerabilities, although it is not evidence of a vulnerability itself.
The single workflow was fully analyzed with no reported audit findings or untrusted execution paths. However, all three referenced actions are unpinned, leaving avoidable build-integrity risk.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
craftcms/cms Version ^4.0 | — | — |
getbrevo/brevo-php Version ^1.0 | — | — |
mailchimp/marketing Version ^3.0 | — | — |
mailjet/mailjet-apiv3-php Version ^1.5 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.