N/A
47%
Total Score
75
100
72
50
The package has made no releases in nearly five years, despite only four releases overall; this is strong evidence of abandonment risk for a maintained application module.
There is no recent issue or pull-request activity. The absence of open work is not inherently negative, but alongside the old last release it supports the conclusion that the project is inactive.
The repository has zero stars and forks and only one watcher. Popularity is supporting evidence rather than a verdict, but these figures provide little evidence of a broad maintenance community.
Composer build tooling is present, which fits the package ecosystem. No security scanning tools are reported, leaving a modest transparency and maintenance gap.
The repository has no security policy. For a module handling downloadable product files and customer-facing flows, this weakens vulnerability-reporting transparency.
We didn't find any vulnerabilities for this package.
No maintainer information available.
| Dependency | Last Release | Score |
|---|---|---|
magento/framework Version 103.0.* | — | — |
magento/module-ui Version 101.2.* | — | — |
magento/module-eav Version 102.1.* | — | — |
magento/module-tax Version 100.4.* | — | — |
magento/module-quote Version 101.2.* | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.