Magento 2 Subscriptions Marketplace
55%
Total Score
caution
No license is declared, repository commits are absent for 3 months, and all four workflow actions are unpinned.
No declared license, recognized license text, or license file was found in the package or repository, leaving the legal terms unclear for adopters.
The registry reports 159 releases in the last 12 months with a median interval of 0 days, but the package age is also reported as 0 days, so cadence evidence is unusually compressed and only partly informative.
The repository shows 0 commits and 0 active maintainers in the last 3 months, which is a meaningful maintenance concern despite the repository having been pushed recently.
The repository has 0 stars and 0 forks, with 2 watchers. This provides little community validation, but popularity is supporting evidence rather than a verdict.
Composer build tooling is present, but no security-scanning tool was detected, leaving a modest transparency and maintenance gap.
We didn't find any vulnerabilities for this package.
No maintainer information available.
| Dependency | Last Release | Score |
|---|---|---|
tnw/marketing Version ~2 | — | — |
magento/framework Version ^103.0.8 | — | — |
magento/module-ui Version ^101.2 | — | — |
magento/module-eav Version ^102.1 | — | — |
magento/module-tax Version ^100.4 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.