setono/sylius-criteo-plugin
The MIT license, repository tests, and Psalm scanning provide useful transparency. All 22 workflow actions are unpinned, while the repository has no security policy; pin this version if its integration is still required.
61%
Total Score
75
50
94
67
Health Score Breakdown
The package declares 22 runtime dependencies for a Sylius plugin, a substantial integration surface that increases upgrade coordination needs but is not inherently unhealthy.
The package has 12 releases since September 2019, but none in the last 12 months and its latest release was about 17 months ago, indicating slowed maintenance.
There were no commits and no active maintainers in the last three months, consistent with the absence of recent releases and raising abandonment concern.
The repository has no published security policy, leaving vulnerability reporting and response expectations undocumented.
The single workflow was fully analyzed with no trigger or injection findings, but all 22 action references are unpinned, weakening build reproducibility and update safety.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
No maintainer information available.
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 twig/twig Version ^2.14 || ^3.0 | — | — |
sylius/core Version ^1.0 | — | — |
sylius/order Version ^1.0 | — | — |
symfony/form Version ^6.4 || ^7.0 | — | — |
setono/tag-bag Version ^2.0 | — | — |
Weekly Downloads
Info
- Last Published
- 1 year ago
- Created
- 7 years ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.