Usable with caveats: the release is clearly packaged, licensed, tested, and backed by a matching repository, but it is brand new with no demonstrated maintenance history. Install it only if you can accept the limited track record and lack of security-policy and scanning evidence.
68%
Total Score
50
100
83
80
The registry namespace and repository owner match, but the owner is reported as a user rather than an organization, so there is limited evidence of institutional backing.
This is the first and only release, published 0 days ago, so there is no release history or established maintenance pattern yet.
There were 0 commits and 0 active maintainers in the last 3 months. Because the repository was created or updated only 0 days ago, this may reflect its newness, but it still leaves maintenance capacity unverified.
The repository has 0 stars, 0 watchers, and 1 fork, offering little community validation. Popularity is supporting evidence only, so this is a modest concern rather than a severe risk.
Composer build tooling is present, but no security scanning tools are reported, leaving automated security-maintenance coverage unverified.
We didn't find any vulnerabilities for this package.
No maintainer information available.
| Dependency | Last Release | Score |
|---|---|---|
magento/framework Version >=103.0.4 <104 | — | — |
magento/module-graph-ql Version >=100.4.0 <101 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.