This is a mature and actively released package: it has existed for over 8 years, has 62 releases including 14 in the last 12 months, and the current version is a stable non-prerelease release. It is not deprecated, has no install-time lifecycle scripts, and its modest three-runtime-dependency profile is understandable for an OXID eShop theme/build module. The main concerns are the mixed GPL-3.0-only/proprietary license declaration, absent packaged tests and changelog, and the lack of a declared source repository, which limits transparency and prevents verification of repository maintenance. Overall, it appears usable to depend on, but license compatibility and long-term maintenance should be confirmed with the publisher.
78%
Total Score
100
80
100
The manifest declares both GPL-3.0-only and proprietary licensing, which creates meaningful downstream licensing ambiguity; however, a license is declared rather than being entirely absent.
The artifact includes a substantial README describing requirements, build commands, and project structure. Tests and a changelog are absent, but this is a focused theme/SCSS build module, so those omissions are maintenance gaps rather than severe evidence of abandonment.
We didn't find any vulnerabilities for this package.
No maintainer information available.
| Dependency | Last Release | Score |
|---|---|---|
oxid-esales/oxideshop-ce Version >=v7.4 | — | — |
therealworld/tools-plugin Version >=v3.2 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.