N/A
18%
Total Score
57
50
Packagist marks the entire package as abandoned and names magento/inventory-composer-metapackage as its replacement. This is a direct indication that new projects should not depend on this package.
The package has had only five releases, all clustered in October 2021, with no releases in the last 12 months. That release history indicates the package has been inactive for nearly five years.
Composer is used for the build, but no security scanning tools were detected in the repository. This is a modest transparency and maintenance gap, not a standalone severe risk.
The linked repository is not archived, which avoids the stronger risk of an explicitly closed project, but its last push was in October 2021 and does not offset the package's abandonment status.
The repository has no security policy. That reduces transparency for reporting and handling vulnerabilities, although it does not by itself show that the package is unsafe.
We didn't find any vulnerabilities for this package.
No maintainer information available.
| Dependency | Last Release | Score |
|---|---|---|
magento/framework Version 103.0.* | — | — |
magento/module-ui Version 101.2.* | — | — |
magento/module-eav Version 102.1.* | — | — |
magento/module-quote Version 101.2.* | — | — |
magento/module-store Version 101.1.* | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.