The repository has useful supporting material and clear organizational ownership. Recent activity is limited to one commit from one contributor, while every workflow action is unpinned and one uses an archived action.
68%
Total Score
67
100
94
100
The package has 12 releases over roughly three years and one release in the last 12 months; the latest release was recent, but the current cadence is limited.
One contributor made all one recent commit, leaving the observed maintenance activity concentrated in a single person; organizational ownership provides some handoff capacity.
Only one commit was recorded in the last three months, indicating limited recent maintenance activity despite the recent release.
All six workflows were analyzed without failures and have no untrusted checkout or script-injection findings, but all eight action references are unpinned and one high-confidence medium-severity finding uses an archived action.
We didn't find any vulnerabilities for this package.
No maintainer information available.
| Dependency | Last Release | Score |
|---|---|---|
truelayer/client Version >=2.6.0 | — | — |
magento/framework Version >=103.0.0 | — | — |
magento/module-sales Version >=100.1.0 | — | — |
magento/module-payment Version >=100.1.0 | — | — |
magento/module-checkout Version >=100.1.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.