Tests, release notes, and a maintained README make integration clearer. Recent commit activity is absent, while the repository has no security policy or scanning tools, so ongoing support and disclosure practices are limited.
68%
Total Score
83
100
83
67
Composer install and update lifecycle scripts are present, which adds execution during dependency operations and warrants some additional review.
The package has 8 releases over about one year, but only 1 release in the last 12 months; this indicates a relatively light recent release cadence.
There were no commits and no active maintainers in the last three months. The recent release partly offsets this, but the current maintenance signal is weak.
The repository has no stars or forks and only 2 watchers, indicating limited adoption evidence. Popularity is supporting evidence, so this is a modest concern rather than a decisive one.
Composer and Make are used for builds, but no security scanning tools were detected, leaving security-process transparency limited.
We didn't find any vulnerabilities for this package.
No maintainer information available.
| Dependency | Last Release | Score |
|---|---|---|
sylius/sylius Version ^2.1 | — | — |
alcohol/iso4217 Version ^4.2 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.