The package has tests, a declared MIT license, and no install-time scripts, which support basic packaging quality. Its maintenance history is too thin for a dependable long-term dependency; pin this exact version only if you can maintain the integration yourself.
38%
Total Score
50
100
64
83
The package is 2,635 days old with only two releases and no releases in the last 12 months; its latest release was in July 2019, indicating severe maintenance stagnation.
The repository is owned by an individual user rather than an organization, so there is no visible organizational backing to compensate for the very small release and maintenance history.
There are no open issues or pull requests and no activity in the last month. This is consistent with an inactive project, although the absence of unresolved issues is mildly reassuring.
The repository has zero stars, forks, and watchers. Popularity is not required for a healthy package, but these counters provide no supporting evidence of community adoption or oversight.
Composer is used for the build, but no security scanning tools were detected. This is a hygiene gap, not evidence that the release is unsafe by itself.
We didn't find any vulnerabilities for this package.
No maintainer information available.
| Dependency | Last Release | Score |
|---|---|---|
sylius/sylius Version ^1.4 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.