Universal Commerce Protocol (UCP) adapter for Sylius (Google/Shopify agentic-commerce standard).
58%
Total Score
caution
A same-day package with 24 releases and one active contributor is too immature for a strong dependency recommendation.
The repository is owned by a GitHub user rather than an organization, so there is no demonstrated organizational handoff capacity to offset the concentrated contributor base.
The package was first released today and has already published 24 releases with a median interval of 0 days, which shows active iteration but very little maturity or production history.
All 22 recent commits came from one contributor, leaving a concentrated maintenance dependency and increasing abandonment or handoff risk.
Composer is used for builds, but no security scanning tools were detected, leaving a notable repository hygiene gap.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
sylius/sylius Version ^2.2.9 || ^2.3.0 | — | — |
symfony/routing Version ^6.4 || ^7.4 | — | — |
symfony/http-kernel Version ^6.4 || ^7.4 | — | — |
doctrine/persistence Version ^3.3 || ^4.0 | — | — |
symfony/http-foundation Version ^6.4 || ^7.4 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.