storefront-x/magento-module-product-attributes-graph-ql
Its MIT license, changelog, README, and small dependency set make the module straightforward to inspect. Nearly four years without a release and over three years without repository commits leave maintenance and compatibility uncertain.
52%
Total Score
50
100
75
88
Health Score Breakdown
Only two releases were published, both in late 2022, with no release in nearly four years. That substantially raises abandonment and compatibility risk.
There were no commits and no active maintainers in the last three months, consistent with the long release gap and weakening confidence in ongoing support.
Composer is used for builds, which fits the package ecosystem, but no security scanning tools were detected; this is a modest transparency and maintenance gap.
The repository is not archived, but its last push was over three years ago; the non-archived status is helpful but does not remove the maintenance concern.
The repository has no security policy, leaving vulnerability-reporting expectations unclear for a module used in Magento deployments.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
No maintainer information available.
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 psr/log Version * | — | — |
magento/magento-composer-installer Version * | — | — |
Weekly Downloads
Info
- Last Published
- 3 years ago
- Created
- 3 years ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.