monsieurbiz/sylius-contact-request-plugin
The package includes tests, release notes, and a clear MIT license. Organization backing and security tooling provide useful support, but maintenance has recently gone quiet and workflow actions are not pinned.
66%
Total Score
75
100
94
67
Health Score Breakdown
The package has 15 releases over about 3 years, with the latest release about 10 months before collection and only one release in the last 12 months. This indicates slower recent delivery than its earlier median interval of about 19 days.
The repository recorded zero commits and zero active maintainers in the last three months. Combined with only one release in the last 12 months, this is evidence of recently quiet maintenance.
The repository has no security policy file. This limits transparency about vulnerability reporting and handling, even though security scanning is present.
All three workflows were analyzed successfully and have no detected sinks or audit findings, but all 11 action references are unpinned. Unpinned actions weaken build reproducibility and make workflow dependencies easier to change unexpectedly.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
No maintainer information available.
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 sylius/sylius Version ~2.0 | — | — |
monsieurbiz/sylius-settings-plugin Version ^2.0.1 | — | — |
monsieurbiz/sylius-rich-editor-plugin Version ^3.0 | — | — |
Weekly Downloads
Info
- Last Published
- 11 months ago
- Created
- 3 years ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.