The module includes clear installation guidance and a declared license. Its small, lightly supported project has no tests or security scanning, increasing the maintenance burden for a Magento integration.
45%
Total Score
25
100
72
83
The package is over three years old, with 12 releases but none in the last 12 months; its latest release was in May 2023. This strongly raises abandonment risk.
The repository had zero commits and zero active maintainers in the last three months, consistent with the long release gap and limited evidence of ongoing maintenance.
The repository is owned by an individual account rather than an organization, so the small maintainer base offers limited visible continuity if the primary author stops maintaining it.
The repository has 1 star, 3 forks, and no watchers, providing little community evidence or external review. Popularity is supporting evidence, so this remains a caution rather than a decisive verdict.
The repository uses Composer build tooling, but no security scanning tools are present. This is a modest process gap rather than evidence that the release is unfit by itself.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
magento/framework Version 100.0.*|100.1.*|101.0.*|102.0.*|103.0.* | — | — |
magento/module-backend Version 100.0.*|100.1.*|100.2.*|101.0.*|102.* | — | — |
ricardomartins/brazilzipcode Version * | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.