Usable with caveats: this is a young but actively released Magento module backed by a matching organization-owned repository. The main concerns are only two commits from one contributor, no tests or changelog, and no security policy.
72%
Total Score
67
100
81
90
A substantial README explains the module and its integration behavior, but neither the artifact nor repository contains tests or a changelog. For an integration module handling orders and inventory, the missing tests are a meaningful maintenance gap.
The package is only 29 days old but has already shipped six releases, with the latest published on the assessment date. This shows active early development, although the short history provides little evidence of long-term stability.
All two recent commits came from one contributor, creating a single-person dependency for maintenance. The organization-owned repository provides some handoff potential, but no second active contributor is shown.
There were two commits in the last three months from one active maintainer, including a very recent push. Recent activity is positive, but the low volume gives limited evidence of sustained maintenance capacity.
Composer is used as the build tool, which fits the PHP package, but no security scanning tools are configured. The absence of scanning is a transparency gap, though it is not by itself evidence that the package is unsafe.
We didn't find any vulnerabilities for this package.
No maintainer information available.
| Dependency | Last Release | Score |
|---|---|---|
magento/framework Version * | — | — |
magento/module-sales Version * | — | — |
magento/module-store Version * | — | — |
magento/module-config Version * | — | — |
magento/module-webapi Version * | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.