The single runtime dependency and stable 2.0.3 release keep integration straightforward. A missing security policy and source documentation that does not identify this package leave extra uncertainty for long-term support.
62%
Total Score
67
100
81
75
The package has 11 releases over about 2 years, but only one release in the last 12 months. That indicates a slow maintenance cadence for a package still being depended on.
The repository recorded zero commits and zero active maintainers in the last 3 months. Combined with the slow release cadence, this is a meaningful maintenance concern.
There were no new or closed issues or pull requests in the last month, while one issue and one pull request remain open. This provides little evidence of active support.
The repository name differs from the package name and its README does not mention the package. Organizational backing reduces the concern somewhat, but the source-to-package relationship is still less transparent.
Composer build tooling is present, but no security scanning tools were detected. This is a modest transparency and maintenance gap rather than evidence of an unsafe release.
We didn't find any vulnerabilities for this package.
No maintainer information available.
| Dependency | Last Release | Score |
|---|---|---|
magento/framework Version ^100.1|^101.0|^102.0|^103.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.