This release appears usable and actively maintained: it has more than three years of history, 94 releases including 27 in the last 12 months, a stable non-prerelease version, recent repository activity, clear licensing, and no deprecation or install-time lifecycle scripts. The main risks are concentrated maintenance with only one active contributor, no tests or changelog in either the artifact or repository, no security policy or scanning tooling, and very limited repository adoption signals. Overall, it is a viable dependency, but its long-term resilience and verification practices are weaker than those of a mature, broadly maintained project.
72%
Total Score
63
100
83
90
A README and GitHub Releases are present, but neither the artifact nor repository contains tests or a changelog. For an integration module, this leaves maintenance and change-verification gaps.
The repository owner is identified as Wiserobot-team with owner type User, not an organization. Therefore, the concentrated contributor activity is not visibly compensated by organizational maintenance capacity.
All 3 recent commits came from one contributor, giving the project a complete short-term contributor concentration and creating a meaningful continuity risk. The repository owner is recorded as a User rather than an organization, so there is no provided project-backing evidence to offset that concentration.
There are no open issues and one open pull request, but no issues or pull requests were closed or merged in the last month. This provides little evidence of responsive community maintenance.
The repository has 0 stars, 1 fork, and 1 watcher. Low popularity is supporting caution about external validation, but it is not by itself evidence that a small package is unhealthy.
We didn't find any vulnerabilities for this package.
No maintainer information available.
| Dependency | Last Release | Score |
|---|---|---|
magento/framework Version ^102.0||^103.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.