Customization configuration for ScandiPWA
45%
Total Score
unhealthy
Risky: no registry releases for over three years and no recent repository commits.
The package has had no release in over three years, despite 29 releases overall and a previously regular median interval of about 34 days. That long silence is a substantial abandonment concern.
The repository recorded 0 commits and 0 active maintainers in the last three months. Its 2024 push date provides some evidence it was not abandoned permanently, but does not offset the current inactivity.
Composer is used as a build tool, but no security-scanning tools were detected. The missing scanning is a modest transparency and hygiene gap rather than evidence that the package is unsafe to depend on.
The repository has no security policy. That weakens reporting transparency, although it is less significant for this small configuration module than the lack of recent maintenance.
We didn't find any vulnerabilities for this package.
No maintainer information available.
| Dependency | Last Release | Score |
|---|---|---|
scandipwa/locale Version ^2 | — | — |
magento/framework Version * | — | — |
magento/module-cms Version * | — | — |
magento/module-eav Version * | — | — |
magento/module-store Version * | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.