Package Health

akawaka/sylius-soge-commerce-plugin

This is a usable but relatively young Sylius plugin with a clear MIT license, documentation, tests, a substantial source tree, recent releases, an active non-archived repository, and useful build and security tooling. However, maintenance capacity is thin: only one commit from one active maintainer occurred in the last 3 months, all recent commit activity is concentrated in that contributor, and 12 pull requests are open with only one merged in the last month. The pre-1.0 version also indicates limited maturity, while the repository lacks a security policy and does not declare top-level workflow permissions. I would consider depending on it with review and an adoption plan, but not treat it as a low-maintenance, highly mature dependency.

Latest v0.1.6PackagistPackagist

68%

Total Score

Maintainer Stability
Maintainer Stability
Assesses the consistency and reliability of package maintainers

63

Dependencies
Dependencies
Evaluates the health and security of package dependencies

100

Maturity
Maturity
Indicates package age, release frequency, and adoption metrics

89

Supply Chain
Supply Chain
Evaluates supply chain security practices and risks

70

Health Score Breakdown

Lifecycle scriptscaution

Composer install, update, and project-creation lifecycle scripts are present. These add execution surface during dependency operations, but no evidence here shows that they are unsafe or unusually risky.

Repo bus factorcaution

All recent commits come from one contributor with a 100% share, creating a meaningful continuity and abandonment risk. Organization ownership offers some potential handoff capacity, but no second active contributor is shown.

Repo commit activitycaution

Only 1 commit was recorded in the last 3 months from 1 active maintainer. The recent release and current repository push provide some compensating evidence, but the observed development pace is thin.

Repo issue activitycaution

There are no open issues and one pull request was merged in the last month, but 12 pull requests remain open and there were no new or closed issues in that period, suggesting limited visible throughput.

Repo popularitycaution

The repository has only 1 star, 0 forks, and 4 watchers. This is weak supporting evidence for community adoption, although popularity alone is not decisive for a specialized plugin.

Vulnerabilities

We didn't find any vulnerabilities for this package.

Package versions

Maintainers

No maintainer information available.

Direct Dependencies

DependencyLast ReleaseScore
sylius/sylius
Version ^1.12
—
—
symfony/webpack-encore-bundle
Version ^1.15
—
—

Weekly Downloads

Info

Last Published
23 days ago
Created
1 year ago

Are You Affected?

Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.

Free. No credit card required.

Aikido Platform