doopcompany/sylius-product-variant-attribute-plugin

Release historydanger

There has been only one release, published about four years ago, with no releases in the last 12 months. This is strong evidence of an unmaintained package, although the stable 1.0.0 version may reduce change-related risk.

Repo commit activitydanger

The repository recorded zero commits and zero active maintainers over the last three months, following years without a new release. This is the clearest evidence of abandonment risk.

Lifecycle scriptscaution

Composer install, update, and project-creation lifecycle scripts are present, so installation can execute package-defined actions. This is a supply-chain exposure that warrants review before adoption, though it is not evidence of malicious behavior by itself.

Repo issue activitycaution

There were no new or closed issues and no pull-request activity in the last month; the unknown open-issue count limits interpretation, but the lack of recent collaboration is consistent with an inactive project.

Repo toolingcaution

Composer is used for the build, but no security-scanning tools are configured. That weakens automated security hygiene, although the absence of workflows means there is no workflow-specific risk to amplify it.