fifty-deg/sylius-scripts-plugin

Lifecycle scriptscaution

Composer install, update, and project-creation lifecycle scripts execute package-defined actions during dependency operations, adding operational supply-chain exposure even though no malicious behavior is established.

Release historycaution

Only three releases exist, with none in the last 12 months; the latest was published in June 2024, so release maintenance appears stalled.

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers in the last three months, consistent with a project that is no longer actively maintained.

Repo issue activitycaution

There were no new or closed issues or pull requests in the last month, leaving little evidence of active project support; one issue remains open.

Repo package mentioncaution

The repository name does not match the package name and its README does not mention the package, creating uncertainty that the linked repository is specifically the package's source.