The repository is not archived and has organization backing, while the README and release notes provide useful consumer documentation. The post-install script and absent security policy add smaller maintenance and transparency concerns.
43%
Total Score
50
75
50
This package has released only once, on May 12, 2019, with no releases in roughly seven years. That strongly indicates abandonment risk for a Magento extension that may need platform compatibility updates.
The repository recorded zero commits and zero active maintainers in the last three months, and its last push was roughly four years ago. The organization backing is a compensating ownership signal, but not evidence of current maintenance.
A post-install command runs during installation, adding execution complexity and a modest supply-chain review concern compared with a package without install-time scripts.
The repository has no documented security policy. This is a transparency and reporting gap, though it is less significant than the long absence of releases and commits.
We didn't find any vulnerabilities for this package.
No direct dependencies.
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.