N/A
38%
Total Score
100
60
75
The package has had only 4 releases, all around October 2021, with no releases in the last 12 months and a package age of 1,804 days. This strongly indicates abandonment risk.
Composer build tooling is present, but no security-scanning tooling was detected. The missing scanning is a modest hygiene concern rather than evidence that the package is unsafe.
The linked repository is not archived, which is a modest compensating signal, but its last push was on October 11, 2021 and does not overcome the stale release history.
The linked repository has no security policy. This is a transparency and maintenance gap, though it is less serious than the lack of recent releases.
We didn't find any vulnerabilities for this package.
No maintainer information available.
| Dependency | Last Release | Score |
|---|---|---|
magento/framework Version 103.0.* | — | — |
magento/framework-message-queue Version 100.4.* | — | — |
magento/magento-composer-installer Version * | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.