Usable with caveats: the package is small, licensed, not deprecated, and has a focused dependency, but maintenance appears to have stopped after only two releases. More than two years without commits or releases makes future Magento compatibility and support uncertain.
58%
Total Score
50
100
83
83
The repository had zero commits and zero active maintainers in the last three months, consistent with more than two years of inactivity and creating a meaningful abandonment risk.
Only two releases were published, with none in the last 12 months; the latest release is more than two years old, which weakens evidence of ongoing maintenance.
The repository has 1 star, 0 forks, and 2 watchers, offering little community evidence or external support if maintenance is needed.
Composer is used for the build, which fits this small PHP package, but no security scanning tools are configured, leaving a modest transparency and maintenance gap.
No repository security policy is present. For a small extension this is not independently severe, but it reduces clarity about how vulnerabilities would be reported.
We didn't find any vulnerabilities for this package.
No maintainer information available.
| Dependency | Last Release | Score |
|---|---|---|
magento/module-quote Version * | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.