Usable with caveats: it is actively releasing, has substantial tests and documentation, and the repository is current rather than archived. Adoption depends heavily on one contributor, while the very rapid release cadence and limited repository security controls add maintainability and transparency concerns.
72%
Total Score
70
100
83
75
Only one registry account has publishing access. That is a modest concern, although the linked repository shows active recent work by the same project owner.
The repository is owned by an individual user rather than an organization, providing no demonstrated institutional maintenance backup.
The package is only 70 days old but has 47 releases, with the latest published on the assessment date; this shows active delivery, although the unusually compressed cadence warrants scrutiny.
All 45 recent commits came from one contributor, creating a significant continuity risk; the repository is user-owned, so there is no organization backing shown to mitigate that concentration.
The repository has only 1 star, 0 forks, and 0 watchers. This is weak supporting evidence, but popularity alone does not outweigh the observed active development.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
magento/framework Version * | — | — |
magento/module-cron Version * | — | — |
magento/module-sales Version * | — | — |
magento/module-store Version * | — | — |
magento/module-config Version * | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.