This is a newly published, stable 1.0.0 Magento module with strong release and repository hygiene: it has an MIT license, README, tests, changelog, security policy, explicit read-only workflow permissions, safe workflow configuration, and a repository that matches and documents the package. The main limitation is that the release is only 0 days old, with one release, no recorded commits or active maintainers in the last 3 months, and no adoption or issue history; these observations may largely reflect its newness but leave maintenance capacity and long-term stability unproven. The package is reasonable to evaluate or adopt with normal project-level review, but it does not yet have the evidence expected of a mature dependency.
68%
Total Score
50
100
83
100
The repository is owned by an individual user rather than an organization, so there is no organizational backing or broader maintainer capacity demonstrated by this signal.
The package has only one release and is 0 days old, so there is no observed release cadence or track record; this is a meaningful maturity concern, though it is consistent with a newly launched package.
No commits or active maintainers were recorded in the last 3 months. Because the package is newly released, this does not establish abandonment, but it provides no demonstrated ongoing maintenance capacity.
There are no issues or pull requests and no recent issue or PR activity. This may reflect the repository's newness, but it leaves community support and maintenance responsiveness unproven.
The repository has zero stars, forks, and watchers, providing no external adoption evidence; given the package is 0 days old, this is weak evidence rather than a severe concern.
We didn't find any vulnerabilities for this package.
No maintainer information available.
| Dependency | Last Release | Score |
|---|---|---|
magento/framework Version ^103.0.4 | — | — |
magento/module-ui Version ^101.2.4 | — | — |
magento/module-tax Version ^100.4.4 | — | — |
magento/module-cron Version ^100.4.4 | — | — |
magento/module-rule Version ^100.4.4 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.