positibe/sylius-composite-price-calculator-bundle

Release historydanger

This is the only release, published in March 2019, with no releases in the last 12 months. The absence of a newer release over about seven years is strong abandonment evidence.

Repo commit activitydanger

There were zero commits and zero active maintainers in the last three months, consistent with the repository's last push being about seven years ago. This materially raises the risk of abandoned maintenance.

Package file treecaution

The package contains only nine files and no test or release-supporting files, indicating a very small project with limited visible maintenance infrastructure. The README and source files at least make its intended use clear.

Repo toolingcaution

Composer build tooling is present, but no security scanning tools were detected. For a small PHP bundle this is a hygiene gap rather than evidence that the release is unsafe.

Security policycaution

The repository has no security policy, leaving vulnerability reporting expectations unclear. This compounds the transparency concern for an otherwise inactive project.