sulu/sylius-producer-plugin

Lifecycle scriptscaution

Composer install, update, and project-creation lifecycle scripts are present. They warrant awareness because they run package-management actions, but this signal alone does not show unsafe behavior.

Release historycaution

The package is over five years old and has a recent release, but only one release arrived in the last 12 months and the median interval is about 168 days, indicating a slow cadence.

Repo commit activitycaution

There were no commits and no active maintainers in the last three months. The recent release provides some compensation, but current maintenance capacity is still unclear.

Repo toolingcaution

The project uses Composer for builds, but no security scanning tools were detected. This is a modest transparency and hygiene gap rather than evidence of abandonment.

Security policycaution

The repository has no security policy. That reduces disclosure transparency, though it is not by itself evidence that the package is unsafe.