bitbag/sylius-dhl-plugin

Release historydanger

The package is 554 days old with only three releases, and it has had no release in the last 12 months; the latest release was on April 14, 2025. This is strong evidence of stalled maintenance for a dependency.

Repo commit activitydanger

There were zero commits and zero active maintainers in the last three months. Combined with no releases in the last year, this indicates a meaningful abandonment risk.

Lifecycle scriptscaution

The package defines post-create, post-install, and post-update Composer scripts. These are common for Symfony or Sylius packages, but they increase installation complexity and deserve attention when adopting the dependency.

Repo package mentioncaution

The repository name does not match the package name and its README does not mention the package. That raises concern that the linked source may not clearly correspond to this release, despite the repository owner matching the registry namespace.

Security policycaution

No security policy was found in the repository. For a shipping integration that handles credentials and external API calls, this is a transparency gap.