Usable with caveats: the package is well-scaffolded, clearly backed by the matching Swissup organization repository, and not deprecated or archived. However, it is a brand-new release with no demonstrated commit or release history yet, and the repository has no security policy or scanning tools.
68%
Total Score
83
100
83
90
This is the first release, published today, with only one release recorded and no established release cadence. That limits evidence of maturity, though the lack of history is expected for a newly introduced package.
There were zero commits and zero active maintainers during the last three months. Because the repository was created or updated today and the release is brand new, this is a maturity gap rather than evidence of abandonment, but maintenance capacity remains unproven.
The repository has zero stars, forks, and watchers. For a package released today this is unsurprising, but it provides no supporting evidence of adoption or community review yet.
The repository uses Composer build tooling, but no security scanning tools are reported. This is a modest transparency and assurance gap, not a severe risk by itself.
No security policy is present in the repository. For a Magento checkout extension that handles storefront behavior, the missing reporting guidance is a genuine but limited maintenance and transparency concern.
We didn't find any vulnerabilities for this package.
No maintainer information available.
| Dependency | Last Release | Score |
|---|---|---|
magento/framework Version >=103.0 | — | — |
magento/module-tax Version >=100.4 | — | — |
swissup/module-core Version ^1.12 | — | — |
magento/module-quote Version >=101.2 | — | — |
magento/module-store Version >=101.1 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.