It has clear documentation, a stable major release, a small dependency surface, and no install-time scripts. The organization-backed project is current and transparent, with only modest workflow and security-process gaps.
84%
Total Score
100
100
100
75
The repository has no security policy, leaving disclosure and response expectations undocumented; this is a process gap, not evidence of abandonment.
The single workflow was fully analyzed with no dangerous triggers, untrusted checkouts, script injection, or audit findings. However, its one action reference is unpinned, so the workflow has a modest reproducibility and supply-chain hygiene gap.
We didn't find any vulnerabilities for this package.
No maintainer information available.
| Dependency | Last Release | Score |
|---|---|---|
thelia/installer Version ^1.6 | — | — |
thelia/pay-plug-module Version ^3.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.