N/A
40%
Total Score
100
58
75
The package has five releases clustered in October 2021 and none in the last 12 months, leaving nearly five years without a recorded release. That strongly raises abandonment risk despite the package having a release history.
Composer is used as the build tool, but no security scanning tools were detected. The missing scanning evidence is a hygiene concern rather than proof of unsafe code.
The repository is not archived, but its last push was in October 2021, consistent with the long release gap and indicating very limited recent maintenance.
The repository has no published security policy. This is a modest transparency gap, though it is less significant than the prolonged absence of releases and commits.
The assessed version is 100.4.2 while the registry reports 100.3.4 as the latest version, creating a notable release-state inconsistency. The version is marked stable and not prerelease, which only partly offsets that concern.
We didn't find any vulnerabilities for this package.
No maintainer information available.
| Dependency | Last Release | Score |
|---|---|---|
magento/framework Version 103.0.* | — | — |
magento/module-eav Version 102.1.* | — | — |
magento/module-store Version 101.1.* | — | — |
magento/module-backend Version 102.0.* | — | — |
magento/module-catalog Version 104.0.* | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.