This release appears usable and reasonably healthy: it is MIT-licensed, not deprecated, has a stable non-prerelease version, frequent recent releases, a small runtime dependency surface, no install-time lifecycle scripts, and a substantial artifact containing tests, documentation, changelog files, and standard PHP package scaffolding. However, the package is only 130 days old, publishing activity is unusually concentrated into a short period, and no source repository is declared, limiting transparency and preventing assessment of repository maintenance, security practices, and contributor depth. The available evidence supports adoption with some due diligence rather than treating it as a mature, fully transparent dependency.
78%
Total Score
100
90
100
Seventeen releases in 130 days, with all 17 released within the last 12 months and a median interval of about 17 hours, demonstrates active publishing but also reflects a very young package and unusually rapid iteration whose long-term stability is not yet established.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
shopware/core Version ~6.7 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.