enhavo/shop-bundle
MIT licensing, tests, and organization backing provide useful transparency. The large dependency surface and missing security policy add smaller ongoing-maintenance concerns.
57%
Total Score
75
50
71
50
Health Score Breakdown
Thirty-three runtime dependencies make adoption and future upgrades more coupled, though the broad Symfony, Sylius, and payment-bundle surface is consistent with a commerce bundle.
The package has 80 releases since August 2019, but none in the last 12 months; the long gap lowers confidence in continued maintenance.
There were no commits and no active maintainers in the last three months, indicating that development activity has stopped recently.
The repository name does not exactly match the package and its README does not mention the package; this is compatible with a subtree split but leaves some provenance ambiguity.
Composer build tooling is present, but no security scanning tooling was detected, leaving a modest repository hygiene gap.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
 Gerhard Seidel |
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 sylius/order Version ^1.12 | — | — |
payum/offline Version ^1.5 | — | — |
sylius/locale Version ^1.12 | — | — |
sylius/product Version ^1.12 | — | — |
sylius/currency Version ^1.12 | — | — |
Weekly Downloads
Info
- Last Published
- 1 year ago
- Created
- 10 years ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.