N/A
43%
Total Score
100
58
75
The package has had only three releases, all concentrated in October 2021, with no releases in the last 12 months and the latest release nearly five years old. This is strong evidence of abandonment risk.
The repository has zero stars and forks and only one watcher. Popularity is supporting evidence rather than a verdict, but these figures provide no meaningful adoption signal to offset the inactivity.
The repository is not archived, which is a compensating positive, but it was last pushed in October 2021 and therefore does not show recent maintenance.
No security policy is present in the repository. This is a transparency and maintenance gap, though it is less severe than the prolonged lack of releases and source updates.
The assessed version is marked stable and is not a prerelease, which supports predictable consumption. However, the reported latest registry version is 100.3.4 while the assessed release is 100.4.1, creating a small consistency concern.
We didn't find any vulnerabilities for this package.
No maintainer information available.
| Dependency | Last Release | Score |
|---|---|---|
magento/framework Version 103.0.* | — | — |
magento/module-sales Version 103.0.* | — | — |
magento/module-analytics Version 100.4.* | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.