This release appears usable and reasonably transparent: it is not deprecated or archived, the repository matches the package and explicitly mentions it, the artifact is small and structurally coherent, and the repository was pushed recently. However, the project has only two releases across roughly 642 days, no tests or changelog in either the artifact or repository, no security scanning or security policy, and negligible repository adoption, so maintenance maturity and assurance are limited. The manifest declares OSL-3.0 while the README states MIT, which should be clarified before adoption. Overall, this is a caution-level dependency rather than an obviously unfit one; review the code and licensing and consider whether its limited maintenance evidence is acceptable.
72%
Total Score
50
100
72
90
The package manifest declares OSL-3.0, which provides an explicit license, but the README states MIT, creating a material licensing inconsistency that should be resolved before use.
A README is present and includes installation, configuration, repository, and contribution guidance, but neither the package nor repository contains tests or a changelog. For a small Magento module this is a meaningful assurance and transparency gap.
The repository is owned by a user account rather than an organization, so there is no organizational backing signal to offset the limited release and activity evidence.
The package is about 642 days old but has only two releases, with one release in the last 12 months and a roughly 642-day median interval. This indicates limited release maturity and makes ongoing maintenance harder to establish.
There are no open issues or pull requests and no recorded issue or pull-request activity in the last month. This is not inherently unhealthy for a small package, but it provides little evidence of active community maintenance.
We didn't find any vulnerabilities for this package.
No maintainer information available.
No direct dependencies.
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.