monsieurbiz/sylius-blog-plugin
Clear licensing, tests, release notes, and organization backing improve confidence. The small dependency set and lack of install hooks reduce integration and installation risk. Add pinned workflow actions and a security policy for stronger project hygiene.
67%
Total Score
67
100
100
67
Health Score Breakdown
The repository recorded zero commits and zero active maintainers in the last three months. A recent release provides some counterevidence, but the lack of current development activity raises maintenance risk.
There were two new pull requests in the last month, but no issues or pull requests were closed and none of the two pull requests were merged. This suggests activity without demonstrated resolution.
The repository has no security policy file. This is a transparency gap for reporting and handling vulnerabilities, though it does not by itself indicate abandonment.
All three workflows were analyzed successfully with no dangerous triggers, untrusted checkouts, script injection, or high-confidence findings. However, all 11 action references are unpinned, leaving the build exposed to moving action code.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
No maintainer information available.
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 sylius/sylius Version ~2.0 | — | — |
monsieurbiz/sylius-rich-editor-plugin Version ^3.0 | — | — |
monsieurbiz/sylius-media-manager-plugin Version ^3.0 | — | — |
Weekly Downloads
Info
- Last Published
- 1 month ago
- Created
- 2 years ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.