67%
Total Score
caution
Usable with caveats: maintenance is active but concentrated in one contributor and workflows use unpinned images.
The package has only 2 releases across about 9 years, with a median interval of about 8 years, although 1 release was published in the last 12 months. This suggests limited release maturity but not current abandonment.
All 5 recent commits came from one contributor. Organization backing provides some handoff capacity, but no second active contributor is shown, leaving maintenance dependent on one person.
Version 0.1.1 is not a prerelease, but the package remains below 1.0, so its API and compatibility may be less mature than an established stable-major package.
All 5 workflows were analyzed and had no untrusted checkout or script-injection findings, but all 6 action references are unpinned and four high-confidence findings identify unpinned or floating container images.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
magento/framework Version ^100.0|^101.0|^102.0|^103.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.