This is a mature and actively released package with 137 releases over roughly 6 years, 24 releases in the last 12 months, a stable non-prerelease version, an explicit Apache-2.0 license, a non-archived organization-owned repository, and no registry deprecation. The main concerns are that recent repository activity is concentrated in one contributor, the repository has no security scanning or security policy, and neither the artifact nor repository reports tests; these reduce resilience and transparency but do not outweigh the strong release cadence, project backing, documentation, changelog, and package-repository alignment. It appears reasonable to depend on, with normal diligence around monitoring updates and validating the integration in your own environment.
78%
Total Score
70
100
89
88
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
shopware/core Version ~6.7.0 | — | — |
shopware/storefront Version ~6.7.0 | — | — |
postfinancecheckout/sdk Version ^4.8.1 | — | — |
shopware/administration Version ~6.7.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.