Synchronizer for CMS/eCommerce platform extensions
12%
Total Score
critical
The package is deprecated, has had no release or commit activity since November 2016, and its repository does not identify the package.
Packagist marks the package as abandoned and provides magero/project-synchronizer as its replacement. Package-level deprecation is a direct reason not to adopt this release.
The last release was in November 2016, and there have been no releases in nearly 10 years. This indicates the package is no longer maintained for current consumers.
The repository recorded zero commits and zero active maintainers during the last 3 months, consistent with the nearly 10-year release gap. The linked project shows no current maintenance capacity.
The repository name does not match the package name and its README does not mention the package. Although a subpackage can legitimately use a monorepo, this combination weakens confidence that the linked source clearly belongs to this package.
The linked repository is not marked archived, but its last push was in November 2016. The unarchived status provides little reassurance against the stronger evidence of abandonment.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
symfony/finder Version ^3.1 | — | — |
symfony/console Version ^3.1 | — | — |
symfony/filesystem Version ^3.1 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.