Y-Square Category Path
61%
Total Score
100
80
100
The manifest declares both GPL-3.0-only and proprietary licensing, while no detected license or license file clarifies how those terms apply. That ambiguity is a genuine adoption concern.
The package has four releases since February 2023, with releases about 203 days apart and only one release in the last 12 months. The October 2025 release shows recent activity, but the cadence is sparse.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
oxid-esales/oxideshop-ce Version ^6.0|^7.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.