Its README and MIT license make installation and permitted use clear. The organization-owned repository is present, but the project shows limited ongoing maintenance and modest workflow hygiene.
62%
Total Score
83
100
88
67
This is the only release, published 742 days ago, with no releases in the last 12 months. That weakens confidence in compatibility maintenance for a Magento extension.
There were zero commits and zero active maintainers in the last three months. The repository is not archived, but the absence of recent activity lowers confidence in continued maintenance.
Composer is used as the build tool, which fits the package ecosystem, but no security scanning tools are configured. This is a modest transparency and hygiene gap.
The repository has no security policy. For a Magento extension, that leaves vulnerability reporting and response expectations unclear.
The sole workflow was fully analyzed with no dangerous triggers, untrusted checkouts, or audit findings. However, both action references are unpinned, leaving avoidable build-integrity risk.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
magento/framework Version * | — | — |
magento/module-catalog Version * | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.