sylius/core-bundle

Dependency profilecaution

The package declares 40 runtime dependencies, including many Sylius and Symfony components. This is consistent with a full-stack e-commerce bundle but creates a comparatively broad upgrade and compatibility surface.

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers in the last three months. The strong release history and same-day repository push partly offset this, but the recent development cadence remains a maintenance concern.

Repo issue activitycaution

There were no new or merged pull requests and no issue activity during the last month, while the open pull-request count is zero. This is limited evidence of current community activity and reinforces the recent commit concern.

Repo package mentioncaution

The repository name does not match the package name and its README does not mention sylius/core-bundle. Although this can occur for a monorepo or related repository, the linkage is less transparent and warrants caution.

Repo toolingcaution

Composer build tooling is present, but no security-scanning tools were detected. That is a modest transparency and hygiene gap, not evidence that the package is unsafe.