Clear licensing, documentation, stable versioning, and organization ownership make the package straightforward to evaluate and integrate. Maintenance has effectively stopped since March 2023, with no commits or active maintainers in the last three months.
58%
Total Score
50
100
83
83
There were no commits and no active maintainers in the last three months, indicating that maintenance capacity has effectively disappeared.
The package has 10 releases over roughly four years with a median interval of about 19 days, but it has had no release in the last 12 months and its latest release was in March 2023.
There was no new or closed issue or pull request activity in the last month, and one pull request remains open, providing no evidence of current project attention.
The repository has only 1 star and 3 forks, so its small user and contributor footprint provides little supporting evidence of maturity or resilience.
Composer is used for builds, which fits the package ecosystem, but no security scanning tools are configured; this is a modest transparency and maintenance gap.
We didn't find any vulnerabilities for this package.
No maintainer information available.
| Dependency | Last Release | Score |
|---|---|---|
magento/framework Version ^103.0.2 | — | — |
magento/module-graph-ql Version ^100.4.2 | — | — |
magento/module-catalog-graph-ql Version 100.4.* | — | — |
magento/module-configurable-product-graph-ql Version ^100.4.2 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.