Shipment tracking for Craft Commerce — tracking numbers on orders from anywhere, tracking links for 100+ carriers, a customer-facing tracking page and widget, CSV import and a push API.
82%
Total Score
healthy
Recent maintenance and strong project documentation offset the risks of a very new package and limited security-process evidence.
The repository is owned by the individual user account justinholtweb, so the single registry maintainer is not offset by organization backing.
The package is only 44 days old and has two releases, so its long-term maintenance record is not yet established. The latest release was published recently, which partly offsets the limited history.
Composer build tooling is present, but no security scanning tools were detected. This is a modest process gap for a package handling tracking URLs, APIs, and customer-facing pages.
The repository has no security policy, leaving vulnerability-reporting expectations and response guidance undocumented.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
craftcms/cms Version ^5.3.0 | — | — |
craftcms/commerce Version ^5.0.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.