shopwhizzy/magento2-export-reviews
The small codebase has clear installation instructions, a matching repository, and no install-time scripts or workflow findings. Its license metadata conflicts with the detected MIT license, and the project has no security policy or scanning tools.
58%
Total Score
50
79
75
Health Score Breakdown
The package declares OSL-3.0 and AFL-3.0, while the artifact license file was detected as MIT. Although license files exist in both the artifact and repository, the mismatch needs clarification before adoption.
Only two releases were published, both on the same day, and there have been no releases in nearly 14 months. This makes ongoing maintenance uncertain.
The repository has had no commits and no active maintainers in the last three months, consistent with the long release gap and raising abandonment concerns.
Composer is used for the build, but no security scanning tools are configured. This is a modest transparency and maintenance gap for a dependency package.
The repository has no security policy, leaving vulnerability-reporting expectations and response procedures undocumented.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
 ShopWhizzy |
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 magento/module-review Version * | — | — |
magento/module-catalog Version * | — | — |
Weekly Downloads
Info
- Last Published
- 1 year ago
- Created
- 1 year ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.