setono/sylius-terms-plugin
The repository is licensed, tested, and organization-backed, with release notes for this version. It is a beta with an unpinned workflow and a high-confidence template-injection finding, so pinning this version needs care.
58%
Total Score
75
83
50
Health Score Breakdown
The package has 15 releases since 2019, but none in the last 12 months, indicating that maintenance and release activity have slowed materially.
The repository recorded 0 commits and 0 active maintainers in the last 3 months, which weakens evidence of current maintenance capacity.
This release is v2.0.0-beta, so consumers are adopting a pre-release version even though the major version is established.
All 24 analyzed action references are unpinned, and the audit found a high-confidence template-injection issue; the latter is hygiene risk on its own but makes the workflow less trustworthy.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
No maintainer information available.
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 twig/twig Version ^2.14 || ^3.8 | — | — |
sylius/core Version ^1.0 | — | — |
doctrine/orm Version ^2.7 | — | — |
symfony/form Version ^5.4 || ^6.4 || ^7.0 | — | — |
sylius/locale Version ^1.0 | — | — |
Weekly Downloads
Info
- Last Published
- 2 years ago
- Created
- 7 years ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.