It has a usable README, tests, release notes, and an MIT declaration, with organization backing and a small dependency surface. Those strengths do not offset the package being withdrawn and the source project being archived with no recent activity.
15%
Total Score
50
100
50
100
Packagist marks the entire package as abandoned, with no replacement named. This is a direct warning against taking a new dependency on the package.
The latest release was published over seven years ago, and there were no releases in the last 12 months. The six-release history shows the package was once active but is now stale.
The repository recorded zero commits and zero active maintainers in the last three months. This supports the abandonment concern rather than showing ongoing maintenance.
The linked Sylius repository is archived, and its last push was over four years ago. Archived source indicates the project is no longer maintained for ongoing use.
There were no new or closed issues or pull requests in the last month, while three issues and two pull requests remain open. The dormant backlog provides no evidence of active support.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
sylius/sylius Version ^1.4 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.