The release is from an established project with documentation, tests, release notes, and a license. Its lack of recent releases or commits leaves little evidence that compatibility and defects will be maintained.
15%
Total Score
0
50
50
Packagist marks the entire package as abandoned and names sylius/api-bundle as its replacement. This is a direct warning against taking a new dependency on this package.
The package has 139 releases since 2017, but none in the last 12 months and its latest release was in January 2023. Its historical maturity does not offset the long period without releases.
The repository recorded zero commits and zero active maintainers during the last three months. This supports the conclusion that ongoing maintenance is absent.
The linked source repository is archived, indicating that normal development has ended even though it was pushed recently. That substantially increases the risk of unresolved compatibility and maintenance problems.
The repository name does not exactly match the package name and its README does not mention the package. Although this may reflect naming differences, the absence of a direct mention makes package ownership less transparent.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
symfony/form Version ^5.4 | — | — |
sylius/sylius Version ~1.11.0 || ~1.12.0 | — | — |
symfony/validator Version ^5.4 | — | — |
symfony/framework-bundle Version ^5.4 | — | — |
friendsofsymfony/oauth-server-bundle Version >2.0.0-alpha.0 ^2.0@dev | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.