Shared contracts for the koh Sylius agent-readiness bundles: provider interfaces, DI tags, the channel-aware AgentContext and the single response-header listener.
70%
Total Score
caution
Forty releases appeared on the first day, while all recent commits came from one contributor.
Only one registry account has publish access. That is a modest publishing bus-factor concern, and the repository evidence also shows one active contributor rather than organizational backing.
The repository is owned by an individual user rather than an organization, so the single-contributor and single-publisher concentration is not visibly backed by a larger maintenance team.
The package is newly published, with an age of 0 days and 40 releases recorded within roughly one minute. This provides little evidence of long-term release stability despite the high release count.
One contributor made all 41 commits in the last 3 months, giving the project a top-contributor share of 100%. The repository owner is an individual, so no organization-level handoff is shown to compensate for this concentration.
The repository recorded 41 commits in the last 3 months, showing active development. However, the activity is concentrated in one maintainer, limiting resilience if that person stops maintaining it.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
sylius/sylius Version ^2.2.9 || ^2.3.0 | — | — |
symfony/config Version ^7.4 || ^8.0 | — | — |
symfony/console Version ^7.4 || ^8.0 | — | — |
symfony/routing Version ^7.4 || ^8.0 | — | — |
symfony/http-kernel Version ^7.4 || ^8.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.