N/A
42%
Total Score
100
63
83
The latest release was published nearly five years ago, with no releases in the last 12 months and only four releases overall. That is strong evidence of abandonment for a package expected to track its surrounding ecosystem.
The repository has zero stars and forks and only one watcher. Popularity is supporting evidence rather than a verdict, but these values provide no external evidence of an active user or contributor community.
The repository uses Composer, appropriate for this PHP package, but reports no security scanning tools. That is a modest transparency and maintenance gap, not evidence that the release is unsafe by itself.
The linked repository is not archived, which is a compensating signal against permanent project shutdown. However, its last push was in October 2021, so non-archived status does not offset the long inactivity shown by the release history.
No repository security policy is present. For a module handling cart and payment-related integration points, this weakens the project's vulnerability-reporting transparency.
We didn't find any vulnerabilities for this package.
No maintainer information available.
| Dependency | Last Release | Score |
|---|---|---|
magento/framework Version 103.0.* | — | — |
magento/module-eav Version 102.1.* | — | — |
magento/module-tax Version 100.4.* | — | — |
magento/module-sales Version 103.0.* | — | — |
magento/module-store Version 101.1.* | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.