Risky to adopt: this release has had no update since September 2019, and its repository has no license and does not clearly identify the package. It remains non-deprecated and small, but maintenance and legal clarity are substantial concerns.
42%
Total Score
0
100
64
100
The package has only one release, published about 7 years ago, with no releases in the last 12 months. That makes ongoing compatibility and maintenance uncertain.
There were no commits and no active maintainers in the last 3 months, consistent with a project that has been inactive since 2019.
No license declaration or license file was found in the package or repository. This creates a real legal and reuse risk for a dependency.
The repository name does not match the package name and its README does not mention the package, so the repository may not clearly document or back this release.
The repository is not archived, which is a positive sign, but it was last pushed about 7 years ago and therefore does not offset the lack of recent releases.
We didn't find any vulnerabilities for this package.
No maintainer information available.
| Dependency | Last Release | Score |
|---|---|---|
magento/framework Version 102.0.* | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.