The repository matches the package, includes a usable README, and has a declared license. Its small audience and absent security policy add exposure, but the main concern is that maintenance appears to have stopped.
48%
Total Score
50
71
50
Only two releases were published, with none in the last 12 months; the latest release was over two years ago. This is strong evidence of stalled maintenance for a package intended to support Magento installations.
The repository has two open issues but no issues or pull requests were created, closed, or merged in the last month. This supports the broader indication that active maintenance is limited.
The repository has zero stars and forks and only one watcher. Popularity is not required for a healthy package, but these counters provide little supporting evidence of community review or adoption.
No security policy was found in the linked repository, leaving vulnerability-reporting expectations undocumented. This is a hygiene and transparency gap rather than evidence of a security defect.
Version 0.0.2 is not a stable-major release, so consumers should expect a less mature compatibility promise. The absence of prerelease labeling provides only limited compensation.
We didn't find any vulnerabilities for this package.
No maintainer information available.
| Dependency | Last Release | Score |
|---|---|---|
theiconnz/base Version >=0.0.4 | — | — |
magento/framework Version 102.0.*|103.0.* | — | — |
magento/module-store Version 101.0.*|101.1.* | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.