A plugin that allows to add tierprices to Sylius
20%
Total Score
critical
Unfit to use: Packagist marks this package as abandoned.
Packagist marks the entire package as abandoned, not merely this release. That is a severe adoption risk even though a replacement package is named.
The package has 42 releases over more than eight years, but none in the last 12 months; the latest release was about 18 months ago. This suggests maintenance has stopped despite its established history.
The repository had zero commits and zero active maintainers in the last three months. That weakens confidence in timely fixes, although a recent push exists in the repository status.
The repository name does not match the package name and its README does not mention the package. This raises uncertainty about whether the linked repository is the package's intended home.
All 7 analyzed action references are unpinned, which weakens build reproducibility. The reported cache-poisoning findings are low-confidence hygiene warnings and do not independently establish a severe risk.
We didn't find any vulnerabilities for this package.
No maintainer information available.
| Dependency | Last Release | Score |
|---|---|---|
sylius/sylius Version ~2.0.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.