N/A
38%
Total Score
100
100
56
75
The package has only 4 releases, all clustered in October 2021, and none in the last 12 months; this is strong evidence of prolonged inactivity for a maintained dependency.
The repository is not archived, but it was last pushed on October 11, 2021, matching the stale release history and indicating that the project is effectively inactive.
The repository has 0 stars and 0 forks, with 1 watcher. Popularity is supporting evidence rather than a verdict, but these counts provide no community-maintenance reassurance alongside the stale activity.
Composer is used as the build tool, which fits the package ecosystem, but no security scanning tools are present; the missing scanning is a modest transparency and hygiene concern.
The linked repository has no security policy, leaving vulnerability-reporting expectations unclear for a package that exposes sales and order data through GraphQL.
We didn't find any vulnerabilities for this package.
No maintainer information available.
| Dependency | Last Release | Score |
|---|---|---|
magento/framework Version 103.0.* | — | — |
magento/module-tax Version 100.4.* | — | — |
magento/module-quote Version 101.2.* | — | — |
magento/module-sales Version 103.0.* | — | — |
magento/module-store Version 101.1.* | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.