Package Health

setono-custom/sylius-pickup-point-plugin-custom

Risky to adopt: the latest release is a beta from over five years ago, and the linked repository has no recent commits. The repository also does not match or mention this package, making its maintenance and provenance difficult to verify.

Latest v1.0.0-beta.13PackagistPackagist

35%

Total Score

Maintainer Stability
Maintainer Stability
Assesses the consistency and reliability of package maintainers

0

Maturity
Maturity
Indicates package age, release frequency, and adoption metrics

50

Supply Chain
Supply Chain
Evaluates supply chain security practices and risks

67

Health Score Breakdown

Release historydanger

The package has 14 releases but none in the last 12 months, and the latest release was over five years ago. This strongly indicates the package is no longer actively maintained.

Repo commit activitydanger

The repository recorded zero commits and zero active maintainers in the last three months. Combined with the old last push, this is strong evidence of abandonment risk.

Repo package mentiondanger

The repository name does not match the package name and its README does not mention the package. This makes it unclear whether the repository actually backs this release.

Package scaffoldingcaution

The published artifact has no README, but that is a consumer-facing documentation gap for a plugin; the source repository does contain tests and uses GitHub releases. The missing artifact changelog and tests are normal packaging practice.

Repository archivedcaution

The linked repository is not archived, which is a positive sign, but its last push was over five years ago and does not offset the broader inactivity evidence.

Vulnerabilities

We didn't find any vulnerabilities for this package.

Package versions

Maintainers

No maintainer information available.

Direct Dependencies

DependencyLast ReleaseScore
symfony/intl
Version ^4.4 || ^5.0
—
—
sylius/sylius
Version ^1.3
—
—
symfony/config
Version ^4.4 || ^5.0
—
—
symfony/messenger
Version ^4.4 || ^5.0
—
—
thecodingmachine/safe
Version ^1.0
—
—

Weekly Downloads

Info

Last Published
5 years ago
Created
7 years ago

Are You Affected?

Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.

Free. No credit card required.

Aikido Platform