Testing, release notes, and a clear license improve transparency. The project has had no commits or releases for about three years, and its README says it is deprecated and will not be maintained; workflow pinning is also weak.
38%
Total Score
50
57
50
The package includes a README and tests, and this exact version has GitHub release notes, which provide useful consumer and maintenance context. However, the README explicitly warns that the repository is deprecated and will not be maintained or receive bug fixes.
There have been 12 releases since June 2022, but none in the last 12 months and the latest release was about three years ago. This indicates a materially stalled release cadence.
The repository recorded zero commits and zero active maintainers in the last three months, consistent with the README's statement that maintenance has ended.
There were no new issues, closed issues, or pull requests in the last month. This supports the broader picture of inactivity, although the available issue count is incomplete.
Composer build tooling is present, but no security scanning tooling was detected. This is a secondary transparency and maintenance gap beside the stronger evidence of abandonment.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
sylius/sylius Version ~1.10.0 || ~1.11.0 | — | — |
bitbag/coding-standard Version ^v2.0.2 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.