N/A
42%
Total Score
100
100
69
83
The package is nearly five years old, has only four releases, and has had no release in the last 12 months. This is strong evidence of abandonment risk.
Composer is used for builds, but no security scanning tools are configured, leaving a meaningful transparency and maintenance gap.
The repository is not archived, although its last push was nearly five years ago; the active archive status does not offset the stale activity by itself.
The repository has no security policy, reducing guidance for reporting and handling vulnerabilities in a package that may be deployed in production.
The assessed version is stable and not a prerelease, but the registry reports an older latest version, creating some uncertainty about release synchronization.
We didn't find any vulnerabilities for this package.
No maintainer information available.
| Dependency | Last Release | Score |
|---|---|---|
magento/framework Version 103.0.* | — | — |
magento/module-wishlist Version 101.2.* | — | — |
magento/module-analytics Version 100.4.* | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.