The README gives clear installation and configuration guidance, and the package declares a stable license and version. However, no release has appeared for nearly five years, while the linked repository neither matches the package name nor mentions it, making long-term support and ownership unclear.
43%
Total Score
63
The package has had only two releases, with none in nearly five years and the latest release published on August 17, 2021. That prolonged inactivity is strong evidence of abandonment risk for a production integration.
The linked repository name does not match the package name, and its README does not mention the package. This makes the source relationship and ongoing ownership unclear, despite the repository being available.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
scandipwa/source Version dev-3.x-dev | — | — |
amasty/module-gdpr Version ^2.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.