This release appears usable and actively maintained: it has 11 releases over 147 days, a stable non-prerelease version, a current unarchived repository, a matching repository reference, and a substantial package tree with documentation and a changelog. The main concerns are that all four recent commits come from one contributor, no tests or security scanning are reported, and the package declares a proprietary license despite including license files; these warrant review before adoption, particularly for a production Magento installation, but do not indicate abandonment or an otherwise unfit release.
78%
Total Score
75
100
78
90
The artifact declares a proprietary license and includes two license files, so licensing is explicit rather than absent. The proprietary terms may restrict redistribution or use and should be reviewed before depending on the package.
The artifact includes a long README and a changelog, but neither the package nor repository contains tests. Documentation and release notes compensate for transparency, but the absence of test coverage remains a maintenance-quality gap.
All four recent commits came from one contributor, giving a 100% top-contributor share. Although the repository owner is an organization, no second contributor is shown as active, so operational continuity remains a concern.
The repository recorded four commits in the last three months, showing recent activity, but only one active maintainer made them all. The activity is positive while the concentration limits maintenance resilience.
The repository has zero stars, one fork, and zero watchers. This is limited supporting evidence, but popularity is not decisive for a small or newly published extension.
No maintainer information available.
| Dependency | Last Release | Score |
|---|---|---|
magento/framework Version ^103.0 | — | — |
magento/module-cms Version ^104.0 | — | — |
magento/module-store Version ^101.0 | — | — |
magento/module-widget Version ^101.0 | — | — |
mage2kishan/module-core Version ^1.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.