This is a generally healthy and actively released package: it has existed for over 4 years, published 65 releases including 24 in the last 12 months, uses a stable non-prerelease version, is not deprecated, declares an LGPL-3.0-or-later license, and has a modest dependency footprint with no install-time lifecycle scripts. The main concerns are transparency and verification: no source repository is declared, and the artifact has no packaged tests or changelog, so maintenance practices and test coverage cannot be independently confirmed. The substantial 215-file Magento module and recent release cadence provide meaningful compensating evidence, but confidence is limited by the missing repository-backed signals.
76%
Total Score
100
90
100
We didn't find any vulnerabilities for this package.
No maintainer information available.
No direct dependencies.
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.