The alpha release has clear notes, a license, repository tests, and security tooling. However, no commits were recorded in the last three months, and the repository/package naming mismatch raises ownership uncertainty.
22%
Total Score
50
69
Packagist marks the entire package as abandoned and names stefandoorn/sylius-google-tag-manager-enhanced-ecommerce-plugin as its replacement. This is a direct adoption risk and outweighs the repository's otherwise healthy metadata.
The package has 50 releases since August 2017, but none in the last 12 months despite a long prior release history. That indicates the published package is no longer receiving registry releases.
The repository recorded zero commits and zero active maintainers during the last three months. This weakens confidence in ongoing maintenance, even though the repository was pushed more recently overall.
The linked repository name does not match the package name and its README does not mention this package. Although naming differences can occur in related projects, this leaves uncertainty about whether the repository is the authoritative source.
The assessed release is v4.0.0-alpha.1, and 85% of recent releases were prereleases. Depending on an alpha version adds compatibility and support risk.
We didn't find any vulnerabilities for this package.
No maintainer information available.
| Dependency | Last Release | Score |
|---|---|---|
sylius/sylius Version ^2.0 | — | — |
stefandoorn/google-tag-manager-plugin Version ^2.0-alpha || ^2.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.