It has a clear license, a small dependency footprint, and a source repository whose name matches the package. The single maintainer and missing security policy leave limited evidence of ongoing support.
55%
Total Score
25
100
75
50
The package has 14 releases but none in more than five years; the latest release was in July 2021. This is strong evidence that maintenance has stalled, although a locale package may require fewer changes than an active library.
The repository recorded no commits and no active maintainers in the last three months, and its last push was more than three years ago. That supports the concern that the package is no longer actively maintained.
One registry maintainer is consistent with a small, user-owned project, but it leaves little visible maintainer redundancy if that person stops supporting the package.
The repository has no security policy. This is a transparency and response-process gap, though the package's small locale-only file set limits the practical impact.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
magento/framework Version * | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.