It has a current stable release, working tests, clear licensing, and organization-backed source ownership. One active contributor limits resilience, but recent commits, release notes, and a security policy support continued maintenance.
78%
Total Score
83
100
100
83
All five recent commits came from one contributor, creating a fragile maintainer base; organization ownership provides some capacity to hand off maintenance.
All five workflows were analyzed successfully, but four high-confidence findings identify unpinned container images, including floating latest tags, which weakens build reproducibility and supply-chain hygiene.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
wikimedia/ip-utils Version ^4.0.1 || ^5.0 | — | — |
yireo/magento2-salesblock2 Version ^2.2 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.