Risky to adopt: this release has had no new registry release or repository activity for nearly six years. It has an organization-backed source repository, documentation, and a stable 1.0.0 package, but the long-standing inactivity creates substantial abandonment risk.
43%
Total Score
63
72
88
The package has only one release, published nearly six years ago, with no releases in the last 12 months. This is strong evidence that the package is no longer actively maintained.
The repository recorded zero commits and zero active maintainers during the last three months, reinforcing the long-term abandonment concern.
There are no open issues or pull requests and no issue or pull-request activity in the last month. This is consistent with an inactive project, though the lack of unresolved issues is not itself harmful.
The repository has zero stars and forks, with five watchers. Low popularity is only supporting evidence and is a minor concern here because the stronger issue is the independently observed lack of maintenance.
The repository uses Composer, appropriate for this Magento package, but has no security scanning tooling. The missing scanning is a hygiene gap rather than evidence that the package is unsafe.
We didn't find any vulnerabilities for this package.
No direct dependencies.
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.