Magento module provides data provider for creating buy request for links of downloadable products
42%
Total Score
100
100
72
50
There has been only one release, published about 4 years and 11 months ago, with no releases in the last 12 months. This is strong evidence of abandonment risk for a dependency, despite the package being small and narrowly scoped.
The repository has 0 stars and 0 forks, with 1 watcher. Low popularity is not decisive for a small Magento module, but it provides little supporting evidence of adoption or community maintenance.
Composer is used for the build, but no security scanning tools are configured. This is a meaningful transparency and maintenance gap, though it is less severe for a six-file module.
The repository is not archived, which avoids a severe abandonment signal, but its last push was about 4 years and 11 months ago and aligns with the one-release history.
The repository has no security policy. That weakens vulnerability-reporting transparency, and no provided signal compensates for the gap.
We didn't find any vulnerabilities for this package.
No maintainer information available.
| Dependency | Last Release | Score |
|---|---|---|
magento/framework Version 103.0.* | — | — |
magento/module-quote Version 101.2.* | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.