setono/sylius-peak-wms-plugin
The workflows lack pinned action versions and contain a high-confidence template-injection finding, while no security policy is published. MIT licensing, repository tests, release notes, and organizational backing provide useful transparency, but the release remains an aging beta.
46%
Total Score
50
50
79
75
Health Score Breakdown
The package has had no registry release in the last 12 months, despite being only about 22 months old, which is a substantial abandonment concern.
The repository recorded no commits and no active maintainers in the last three months, reinforcing the release-history evidence of stalled maintenance.
The package declares 33 runtime dependencies, including a broad Sylius and Symfony surface, which increases maintenance exposure but is consistent with a substantial integration plugin.
The repository has no security policy, leaving vulnerability-reporting and response expectations undocumented.
The assessed release is still a prerelease beta, and all recent releases are prereleases, so compatibility and long-term support remain uncertain.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
No maintainer information available.
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 psr/log Version ^1.0 || ^2.0 || ^3.0 | — | — |
sylius/core Version ^1.0 | — | — |
doctrine/orm Version ^2.15 | — | — |
sylius/order Version ^1.0 | — | — |
sylius/payment Version ^1.0 | — | — |
Weekly Downloads
Info
- Last Published
- 1 year ago
- Created
- 1 year ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.