The package has clear licensing, extensive documentation, and a concrete 55-file Magento module. Its source has had no commits in about three months, and the repository does not identify or mention this package, which weakens confidence in ongoing maintenance and ownership.
58%
Total Score
0
100
72
75
The repository recorded zero commits and zero active maintainers during the last three months, materially increasing abandonment risk for a package this new.
There have been only two releases, both published about three months ago and close together, leaving little evidence of sustained release maintenance.
The repository name does not match the package name and its README does not mention the package, so the linkage and ownership are not clearly established.
The repository has one star and no forks or watchers, indicating limited adoption, though popularity is supporting evidence rather than a verdict.
Composer build tooling is present, but no security-scanning tool was detected; this is a modest transparency and hygiene gap.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
orangecat/core Version * | — | — |
magento/framework Version * | — | — |
orangecat/module-prices Version * | — | — |
orangecat/module-company Version * | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.