N/A
40%
Total Score
100
100
64
75
This package has only one release, published about 4 years 11 months ago, with no releases in the last 12 months. That is strong evidence of abandonment risk for a dependency.
The repository has zero stars and forks and one watcher. Low adoption is supporting evidence of limited community validation, not a standalone reason to reject a small package.
Composer is used as the build tool, which fits the package ecosystem, but no security scanning tools were detected. This is a minor hygiene limitation and does not outweigh the maintenance evidence.
The repository is not archived, which preserves a path for maintenance, but its last push was also about 4 years 11 months ago. The inactive repository materially reinforces the stale release history.
The linked repository has no security policy. This is a modest transparency gap, although it is less significant than the demonstrated lack of recent release and repository activity.
We didn't find any vulnerabilities for this package.
No maintainer information available.
| Dependency | Last Release | Score |
|---|---|---|
magento/framework Version 102.0.* | — | — |
magento/module-quote Version 101.1.* | — | — |
magento/module-store Version 101.0.* | — | — |
magento/module-braintree Version 100.3.* | — | — |
magento/module-quote-graph-ql Version 100.3.* | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.