Package Health/alma/sylius-payment-plugin

alma/sylius-payment-plugin

Tests, a changelog, release notes, and organization ownership provide solid project support. Repository work has paused for three months, while one workflow uses an unpinned container image; the missing security policy adds a smaller transparency gap.

Latest 2.2.0

Packagist

63%

Total Score

Maintainer Stability

Dependencies

100

Maturity

100

Supply Chain

Health Score Breakdown

Repo commit activity

The repository recorded 0 commits and 0 active maintainers in the last three months. This is a meaningful maintenance warning, although a recent package release and organization backing provide some compensation.

Repo issue activity

There are 4 open issues and 10 open pull requests, but no issues or pull requests were opened or merged in the last month. The unresolved queue and lack of recent movement indicate maintenance caution.

Security policy

The repository has no security policy. For a payment plugin, the absence reduces transparency about vulnerability reporting and handling.

Workflow audit

Both workflows were analyzed completely, with no untrusted checkouts or script injection, and two of three action references are pinned. However, the audit found one high-confidence, high-severity unpinned container image, leaving a supply-chain hygiene risk.