The module has a small dependency surface and no install-time scripts, but its maintenance record is effectively absent. It has had no release or commit activity since June 2019, with no tests or security policy to support ongoing maintenance.
38%
Total Score
50
100
69
83
This package has only one release, published in June 2019, and none in the last 12 months; that strongly suggests abandonment risk.
The repository recorded zero commits and zero active maintainers in the last three months, consistent with the package's long period without releases.
A single registry publishing account limits visible continuity, and the repository is user-owned rather than organization-backed. This reinforces the maintenance concern, though access records alone do not prove inactivity.
The artifact has no README, tests, or changelog, although missing tests and changelogs are normal for published artifacts. The exact-version GitHub release notes provide a small compensating transparency signal, but the missing README still weakens consumer guidance.
The repository has zero stars, forks, and watchers. Popularity is only supporting evidence, but these counters provide no additional evidence of community review or support.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
magento/framework Version 100.0.*|100.1.*|101.0.*|102.0.* | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.