The repository includes tests, release notes, license coverage, and static security tooling. Workflow references are all unpinned, and one high-confidence template-injection finding adds maintenance and automation risk.
58%
Total Score
75
93
67
The package had six releases with a median interval of about 16 days, but none in the last 12 months; the latest release was on December 4, 2024, indicating a prolonged pause.
There were zero commits and zero active maintainers in the last three months, consistent with the broader release pause and raising abandonment risk.
The repository has no published security policy, leaving the process for reporting and handling vulnerabilities unclear.
All 24 action references are unpinned, and the audit found one high-confidence template-injection issue; there are no untrusted checkouts or script-injection findings, so this is a meaningful hygiene concern rather than a severe standalone risk.
We didn't find any vulnerabilities for this package.
No maintainer information available.
| Dependency | Last Release | Score |
|---|---|---|
sylius/core Version ^1.0 | — | — |
doctrine/orm Version ^2.0 || ^3.0 | — | — |
sylius/order Version ^1.0 | — | — |
symfony/form Version ^5.4 || ^6.4 || ^7.0 | — | — |
symfony/config Version ^5.4 || ^6.4 || ^7.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.