This is a reasonably well-structured, actively released package with a stable major version, MIT licensing, no deprecation notice, no install-time lifecycle scripts, a modest dependency surface, and substantial artifact-level documentation and tests. However, it is young at 117 days, registry publishing is associated with one maintainer account, and no source repository is declared, which materially limits transparency and prevents verification of repository maintenance, provenance, and contributor activity. It is usable, but dependency adoption should account for the limited independent evidence of long-term maintenance.
70%
Total Score
50
100
90
100
Only one registry maintainer account is listed. Registry access does not establish actual activity, but the narrow publishing base leaves limited visible redundancy if that maintainer becomes unavailable.
The package is young at 117 days but has 14 releases, all within the last 12 months, with a median interval of about 18 hours. This demonstrates active publishing, though the short history provides limited evidence of long-term stability.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
shopware/core Version ~6.7 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.