The project has a long release history, a current stable version, and clear licensing. Its small popularity and lack of security tooling add modest uncertainty; pin this version and monitor updates.
68%
Total Score
67
50
89
75
Seven runtime dependencies are declared, including Magento framework components and PHPUnit. The dependency set is not excessive, but having PHPUnit as a runtime dependency is an avoidable packaging concern.
The repository recorded zero commits and zero active maintainers in the last three months. This is a meaningful maintenance warning, although the recent release history provides some compensation.
There are 40 open issues, with no new or closed issues and no pull-request activity in the last month. The unresolved backlog and inactivity raise maintenance uncertainty.
The repository has 10 stars, 11 forks, and 2 watchers. Low popularity limits independent visibility and review, though popularity is supporting evidence rather than a decisive health measure.
The repository uses Composer, but no security scanning tools are detected. The missing automated security coverage is a modest transparency and maintenance gap.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
phpunit/phpunit Version * | — | — |
magento/framework Version >=100.0.0 | — | — |
laminas/laminas-filter Version * | — | — |
magento/zendframework1 Version * | — | — |
magento/module-sample-data Version >=100.0.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.