It has a small, focused artifact, a clear installation and removal guide, and no install-time scripts. Its declared GPL-3.0 license, matching repository, and security policy improve transparency, but compatibility and maintenance remain uncertain.
44%
Total Score
33
100
75
100
The package has had no release in more than seven years, with zero releases in the last 12 months. Its seven-release history shows it was once maintained, but does not offset the prolonged inactivity.
The repository recorded zero commits and zero active maintainers in the last three months, consistent with the package's long release gap and indicating no visible ongoing maintenance.
The repository is owned by an individual account rather than an organization, so there is no demonstrated organizational maintenance capacity to compensate for the inactivity.
There were no new or closed issues or pull requests in the last month, while five issues remain open. This is additional evidence of inactivity, though issue volume is small.
Composer is used for the build, which fits the package ecosystem. No security scanning tools were detected, a modest hygiene gap that matters less than the clearly observed maintenance lapse.
We didn't find any vulnerabilities for this package.
No maintainer information available.
| Dependency | Last Release | Score |
|---|---|---|
magento/framework Version 101.0.4|101.0.5|101.0.6|101.0.7|101.0.8 | — | — |
magento/module-sales Version 101.0.3|101.0.4|101.0.5|101.0.6|101.0.7 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.