vct/main
The package is small and clearly tied to its repository, with a stable version and no install-time scripts. Its single publisher and absent security policy leave limited maintenance assurance.
58%
Total Score
50
88
75
Health Score Breakdown
Only one registry account, VCT, can publish the package, leaving a thin apparent publishing base. This is a modest resilience concern rather than a severe risk because the linked repository clearly matches the package.
The package has only 3 releases and none in the last 12 months; the latest release was about 16 months ago. This indicates materially slowed maintenance for a dependency.
The repository recorded 0 commits and 0 active maintainers in the last 3 months, providing no evidence of current development activity. The repository is not archived, but that does not offset the recent inactivity.
The linked repository has no security policy, reducing transparency about vulnerability reporting and response. This is a minor hygiene gap, not evidence of unsafe code.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
 VCT |
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 magento/framework Version ^103.0 | — | — |
magento/module-config Version ^101.2 | — | — |
magento/module-backend Version ^102.0 | — | — |
Weekly Downloads
Info
- Last Published
- 1 year ago
- Created
- 2 years ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.