php-etl/sylius-plugin

Documentation and automated tests are present, and the repository remains unarchived under organizational ownership. The package has had no registry release in over three years and no commits in the last three months; all three workflow actions are unpinned.

Latest v0.7.1

Packagist

52%

Total Score

Maintainer Stability

Maturity

Supply Chain

Health Score Breakdown

Release history

Only two releases exist, with the latest published over three years ago and none in the last 12 months. This is substantial evidence of release abandonment for a package developers may need to keep compatible.

Repo commit activity

There were no commits and no active maintainers in the last three months. Combined with the long release gap, this indicates weak recent maintenance activity.

Security policy

The repository has no security policy. This is a transparency and vulnerability-reporting gap, though it is less serious than the observed maintenance slowdown.

Version stability

Version v0.7.1 is not a stable major release, so compatibility expectations are weaker. It is not marked as a prerelease, which provides a small compensating signal.

Workflow audit

All three analyzed action references are unpinned, which weakens build reproducibility. The audit found no dangerous triggers, untrusted checkouts, script injection, or other high-impact findings.

Vulnerabilities

We didn't find any vulnerabilities for this package.

Package versions

Maintainers

Grégory Planchat

Direct Dependencies

Dependency	Last Release	Score
symfony/config Version ^6.0	—	—
nikic/php-parser Version ^4.10	—	—
php-etl/fast-map-plugin Version *	—	—
php-etl/satellite-toolbox Version *	—	—
php-etl/packaging-contracts Version 0.3.*	—	—