The repository is still public and the README explains installation, but there is no security policy or automated security scanning. The single 2018 release and absent recent commits make long-term compatibility and support uncertain; the proprietary license and repository naming mismatch add adoption risk.
38%
Total Score
50
67
75
This package has only one release, published in August 2018, with no releases in the last 12 months. That long period without a new release is strong evidence of abandonment risk for a Magento extension.
The manifest declares a proprietary license, but no license file was detected in the package or repository. This limits transparency and may make adoption or redistribution legally unsuitable for some projects.
The repository recorded zero commits and zero active maintainers in the last three months. Its last push was in December 2022, so there is little evidence of current maintenance despite the repository remaining available.
The linked repository name does not match the package name and its README does not mention the package. That creates uncertainty about whether the repository is the authoritative source for this release.
The repository has no security policy. For an extension that records administrator login history, the absence of a documented vulnerability-reporting process is a meaningful transparency gap.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
magento/framework Version >100.0 | — | — |
magento/module-store Version >100.0 | — | — |
magento/module-backend Version >100.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.