The release is clearly licensed and has no install-time scripts or deprecation warning. The linked source is not identified as this package, and there is no recent commit activity, leaving maintenance and provenance concerns.
53%
Total Score
50
83
75
This package has only one release, published about 11 months ago, so there is little release history to demonstrate sustained maintenance.
The repository recorded zero commits and zero active maintainers in the last three months, which weakens evidence of ongoing maintenance.
The repository name does not match the package name and its README does not mention the package, making the source-package relationship less transparent.
The linked repository has no security policy, which is a transparency gap for an extension that operates within a Magento admin environment.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
magento/framework Version 103.0.* || 103.1.* || 103.2.* | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.