This release appears usable and reasonably well-scaffolded: it has an MIT license, tests in the artifact, substantial documentation, no install-time lifecycle scripts, stable versioning, and no registry deprecation. However, the package is young at 117 days, all 13 releases occurred within that period with a median interval of about 22 hours, and only one registry publishing maintainer is listed. No source repository is linked, which limits transparency and prevents verification of repository maintenance, contributor breadth, commit activity, and build provenance. Overall, it is a plausible dependency but merits caution until it demonstrates longer-term maintenance and stronger public backing.
72%
Total Score
50
100
90
100
Only one registry account, Ten Bruggencate Development, has publish access. This does not prove weak maintenance, but it indicates a narrow publishing base and limited resilience if that maintainer becomes unavailable.
The package has 13 releases over 117 days, showing active early development, but the short observed history does not yet establish long-term maintenance stability; the roughly 22-hour median release interval also suggests a rapidly evolving project.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
shopware/core Version ~6.7 | — | — |
shopware/storefront Version ~6.7 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.