N/A
42%
Total Score
50
100
64
83
Only three releases exist, with the latest published in October 2021 and none in the last five years. This is strong evidence of abandonment risk for a package intended to remain a dependency.
There are no open issues or pull requests and no recent activity. While a quiet issue tracker can be healthy, here it is consistent with the absence of recent releases.
The repository name matches the package, reducing the risk that it is attached to an unrelated project, but the README does not mention the package. This is a minor documentation gap.
The repository has zero stars and forks and only one watcher, providing little evidence of community adoption or review. Popularity is supporting evidence, but this reinforces the weak maintenance picture.
Composer build tooling is present, but no security-scanning tooling is reported. This is a modest transparency and maintenance gap for a dependency project.
We didn't find any vulnerabilities for this package.
No maintainer information available.
| Dependency | Last Release | Score |
|---|---|---|
magento/framework Version 103.0.* | — | — |
magento/module-catalog Version 104.0.* | — | — |
magento/module-catalog-graph-ql Version 100.4.* | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.