planetpay/planet-sylius-payment-plugin

Licensecaution

The manifest declares OSL-3.0, while the artifact license file is detected as MIT, creating a material licensing mismatch. A license file is present, so this is a caution rather than an absence of licensing.

Lifecycle scriptscaution

The package declares post-create-project-cmd, post-install-cmd, and post-update-cmd scripts. Install-time execution increases adoption and review risk, although the signal does not show malicious behavior.