nfq/sylius-omnisend-plugin

Licensecaution

The manifest declares MIT, but the artifact and repository license file were detected as EUPL-1.2. This mismatch needs clarification before adoption because the applicable terms are unclear.

Repo commit activitycaution

There were no commits and no active maintainers in the last three months, despite the package's earlier release cadence. This is a meaningful maintenance concern, though not yet evidence of abandonment on its own.

Repo issue activitycaution

No issues or pull requests were opened or closed in the last month, while two issues and two pull requests remain open. This suggests limited recent project responsiveness.

Repo toolingcaution

The repository uses Composer build tooling, but no security-scanning tool was detected. That is a transparency gap for a package integrating external APIs, although it does not by itself indicate unsafe code.

Security policycaution

The repository has no published security policy or reporting path. This weakens vulnerability-handling transparency for a package used in ecommerce integrations.