The README gives clear Magento installation and configuration steps, and the package is backed by an organization with a stable release. Maintenance has been quiet for over three years, with no security policy or scanning, so future compatibility support is uncertain.
58%
Total Score
50
100
69
75
The latest release was published in August 2023, and there have been no releases in the following three years, indicating a substantial maintenance gap.
The repository recorded no commits and no active maintainers in the last three months, consistent with the multi-year release gap and increasing abandonment risk.
The package declares a CC-BY-NC-ND-3.0 license in its manifest, so it is licensed, although the noncommercial and no-derivatives terms may restrict some uses.
The repository has zero stars and forks and only six watchers, providing little community evidence to offset the lack of recent maintenance.
Composer is used for builds, but no security scanning tooling is present, leaving a modest transparency and maintenance gap.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
magento/framework Version ~102.0|~103.0 | — | — |
league/oauth2-client Version ^2.4 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.