Package Health

koh/sylius-ucp

Universal Commerce Protocol (UCP) adapter for Sylius (Google/Shopify agentic-commerce standard).

Latest v1.1.20PackagistPackagist

58%

Total Score

caution

A same-day package with 24 releases and one active contributor is too immature for a strong dependency recommendation.

Health Score Breakdown

Project backingcaution

The repository is owned by a GitHub user rather than an organization, so there is no demonstrated organizational handoff capacity to offset the concentrated contributor base.

Release historycaution

The package was first released today and has already published 24 releases with a median interval of 0 days, which shows active iteration but very little maturity or production history.

Repo bus factorcaution

All 22 recent commits came from one contributor, leaving a concentrated maintenance dependency and increasing abandonment or handoff risk.

Repo toolingcaution

Composer is used for builds, but no security scanning tools were detected, leaving a notable repository hygiene gap.

Vulnerabilities

We didn't find any vulnerabilities for this package.

Package versions

Maintainers

Kai Ole Hartwig

Direct Dependencies

DependencyLast ReleaseScore
sylius/sylius
Version ^2.2.9 || ^2.3.0
—
—
symfony/routing
Version ^6.4 || ^7.4
—
—
symfony/http-kernel
Version ^6.4 || ^7.4
—
—
doctrine/persistence
Version ^3.3 || ^4.0
—
—
symfony/http-foundation
Version ^6.4 || ^7.4
—
—

Weekly Downloads

Info

Last Published
11 hours ago
Created
3 months ago

Are You Affected?

Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.

Free. No credit card required.

Aikido Platform