bridge-payment-sylius/sylius-payment-plugin

Licensecaution

The artifact includes an MIT license file, but the manifest declares the package proprietary; that mismatch creates avoidable licensing uncertainty.

Lifecycle scriptscaution

Composer install, update, and project-creation scripts run during lifecycle events. These are a review point for consumers, although their presence alone does not show unsafe behavior.

Release historycaution

The package has 11 releases over about three years, but none in the last 12 months; this materially raises maintenance and abandonment concerns.

Repo commit activitycaution

The repository had zero commits and zero active maintainers in the last three months. Together with no releases in the last 12 months, this points to stalled maintenance.

Repo issue activitycaution

There are two open issues but no new or closed issues and no pull-request activity in the last month, providing additional evidence of limited current engagement.