N/A
62%
Total Score
caution
Usable with caveats: recent releases exist, but maintenance activity is thin and package ownership is less clear.
The package is over three years old with 11 releases, but only one release in the last 12 months and the latest release was over six months ago, indicating a slower recent cadence.
The repository had zero commits and zero active maintainers in the last three months, a meaningful sign of thin current maintenance despite the recent release.
The repository name does not match the package name, and no README mention was available. That makes the package-to-source relationship less clear, although a subpackage naming difference can be ordinary.
The repository has zero stars and forks and only one watcher. This is weak supporting evidence rather than a verdict, but it provides little community validation.
Composer is used for the build, which fits the package ecosystem, but no security-scanning tools are configured, leaving a modest hygiene gap.
We didn't find any vulnerabilities for this package.
No maintainer information available.
| Dependency | Last Release | Score |
|---|---|---|
m2-oh/module-core Version * | — | — |
magento/framework Version * | — | — |
magento/theme-frontend-luma Version 100.4.* | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.