N/A
38%
Total Score
50
100
75
83
The package has had no registry release in nearly five years: its latest release was October 22, 2021, despite eight releases overall. This is strong evidence of abandonment risk for a dependency.
The repository recorded zero commits and zero active maintainers in the last three months. Combined with the last push being in October 2021, this indicates no observed current maintenance.
There were no new or closed issues and no pull-request activity in the last month, with zero open pull requests. This provides no evidence of current project attention.
Composer is used as the build tool, which fits the package ecosystem, but no security scanning tools are reported. The missing security automation is a modest transparency and maintenance gap.
The linked repository is not archived, but its last push was October 22, 2021. The non-archived status is positive, while the old push date reinforces the maintenance concern captured by release and commit activity.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
magento/magento2-base Version ^2.3.1 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.