Usable with caveats: this is a clearly licensed, dependency-constrained 1.0.0 release with a matching repository and useful README. It is brand new with no observed commit or contributor activity yet, has no security scanning or security policy, and has no popularity or issue history to establish maturity.
62%
Total Score
50
100
83
90
The registry namespace and repository owner match, and the repository is owned by a user account rather than an organization. The matching ownership supports attribution, although it offers less demonstrated institutional backing.
This is the only release, published 0 days ago, so there is no track record of maintenance, fixes, or release consistency yet. Newness alone is not abandonment, but it limits confidence in long-term dependability.
The repository recorded 0 commits and 0 active maintainers in the last 3 months. Because the package was created today, this is partly explained by its age, but there is still no observed maintenance capacity beyond the initial publication.
The repository has 0 stars, 0 forks, and 0 watchers. Popularity is only supporting evidence, but these values provide no external adoption signal for this brand-new package.
Composer is used as the build tool, which fits the PHP package, but no security scanning tools are configured. The build setup is appropriate while security-process evidence is limited.
We didn't find any vulnerabilities for this package.
No maintainer information available.
| Dependency | Last Release | Score |
|---|---|---|
magento/framework Version >=103.0.4 <104 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.