The README, changelog, and release notes provide useful consumer documentation, and installation has no lifecycle scripts. Its very old release and absent recent repository activity leave maintenance and compatibility risk high for a modern Magento deployment.
42%
Total Score
0
100
79
75
This is the package's only release, published over eight years ago, with no releases in the last 12 months. The absence of a release cadence materially increases abandonment and compatibility risk.
The repository recorded zero commits and zero active maintainers in the last three months, consistent with the package's long release gap. No provided activity signal compensates for this stagnation.
Composer is used for builds, which supports reproducible project structure, but no security-scanning tools are present. The missing scanning is a modest transparency and maintenance concern.
The linked repository has no security policy, reducing transparency for reporting and handling security issues. This is a meaningful hygiene gap for a package that integrates with an external delivery service.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
mozgbrasil/magento-boxpacker-php_56 Version 1.0.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.