It has clear installation documentation, tests, and only two runtime dependencies. The repository is unarchived, but its small public footprint limits confidence in long-term support.
58%
Total Score
50
75
75
The package has 10 releases over roughly 8 years, but none in the last 12 months; the latest release was about 14 months ago. This indicates materially reduced maintenance activity.
There were no commits and no active maintainers in the last 3 months. Together with the lack of recent releases, this is evidence of currently dormant maintenance.
The repository has only 3 stars, 0 forks, and 1 watcher. Popularity is not decisive, but this very small footprint provides little supporting evidence of durable community adoption.
Composer build tooling is present, but no security-scanning tooling was detected. The missing scanner is a hygiene limitation rather than a severe supply-chain finding.
The repository has no security policy. This weakens vulnerability-reporting transparency, although it is a secondary concern compared with the maintenance signals.
We didn't find any vulnerabilities for this package.
No maintainer information available.
| Dependency | Last Release | Score |
|---|---|---|
sylius/sylius Version ^1.10 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.