nextstore/sylius-gift-card-plugin

Licensecaution

The release declares a proprietary license but provides no recognized license text or license file, limiting transparency and reuse confidence.

Lifecycle scriptscaution

Composer install, update, and create-project hooks expand installation behavior and deserve care, although their presence alone does not show harmful or unnecessary actions.

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers in the last three months, which weakens evidence of ongoing maintenance despite a recent package release.

Repo package mentioncaution

The repository name does not match the package name and its README does not mention the package, making the package-to-source relationship less transparent; organizational backing partly offsets this concern.

Security policycaution

The linked repository has no security policy, leaving vulnerability-reporting and response expectations undocumented.