N/A
38%
Total Score
64
50
The package has only three releases, all clustered in October 2021, and none in the last 12 months. This long period without a release is strong evidence of abandonment risk for a maintained dependency.
The repository has zero stars and forks and only one watcher. Popularity is not required for health, but these counters provide no supporting evidence of an active user or contributor community.
Composer is used as the build tool, which fits this package's ecosystem, but no security scanning tools are reported. That is a modest transparency and maintenance-hygiene concern.
The linked repository has no security policy. For a Magento module that runs inside an application and handles shipping configuration, the missing disclosure process is a real but secondary concern.
The assessed version is 100.4.2, while the registry reports 100.3.4 as the latest version. That mismatch weakens release transparency and makes it harder to verify the assessed artifact's place in the project history.
We didn't find any vulnerabilities for this package.
No maintainer information available.
| Dependency | Last Release | Score |
|---|---|---|
magento/framework Version 103.0.* | — | — |
magento/module-quote Version 101.2.* | — | — |
magento/module-sales Version 103.0.* | — | — |
magento/module-store Version 101.1.* | — | — |
magento/module-config Version 101.2.* | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.