The package has a clear license, a matching repository, and no install-time scripts. Its dependency set is modest, but the repository has no security policy or automated workflows.
62%
Total Score
100
88
75
Only two releases were published, with none in the last 12 months; the latest registry release was about two years ago. The repository was pushed more recently, which partly offsets but does not remove the release-cadence concern.
The repository has zero stars and zero forks, with two watchers. This is weak supporting evidence of community adoption, though popularity alone is not decisive for a small Magento extension.
The linked repository has no security policy. That is a transparency and maintenance gap, although it does not by itself make the release unfit to use.
No GitHub Actions workflows were found, so there are no workflow findings to assess; this provides no evidence of unsafe automation but also no build or security automation signal.
We didn't find any vulnerabilities for this package.
No maintainer information available.
| Dependency | Last Release | Score |
|---|---|---|
theiconnz/base Version >=0.0.4 | — | — |
magento/framework Version 102.0.*|103.0.* | — | — |
magento/module-store Version 101.0.*|101.1.* | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.