3brs/sylius-order-comments-plugin
Tests, release notes, and a clear MIT declaration make the package reasonably transparent to integrate. The workflow has a low-severity package-install hygiene issue, while the small repository footprint limits supporting evidence.
62%
Total Score
75
93
75
Health Score Breakdown
Six releases were published within about three days, with a median interval of roughly 3 minutes. This shows an initial release burst but does not yet demonstrate a sustained maintenance cadence.
The repository recorded no commits and no active maintainers during the last three months. That is a meaningful maintenance concern for a package whose recent releases were concentrated in a short burst.
The single workflow was fully analyzed and has no untrusted checkouts or script injection findings. It does, however, install a package outside a lockfile with high-confidence low severity, a modest reproducibility concern.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
No maintainer information available.
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 sylius/sylius Version ^2.0 | — | — |
Weekly Downloads
Info
- Last Published
- 4 months ago
- Created
- 5 months ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.