The package has a README, tests, clear MIT licensing, and organization backing. Its release cadence is strong, but repository activity is quiet and the repository does not clearly identify this package in its README.
68%
Total Score
75
83
100
The repository recorded zero commits and zero active maintainers in the past three months. This is a meaningful maintenance concern, although the recent release history shows continued publishing activity.
The repository name does not match the package name and its README does not mention sylius/inventory-bundle. Although naming differences can occur in component repositories, this leaves package ownership less clearly verified.
The release is marked stable and not a prerelease, but the reported latest version is v1.13.17 while the assessed release is v2.2.9, indicating inconsistent version metadata.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
sylius/inventory Version ^2.0 | — | — |
symfony/validator Version ^6.4 || ^7.4 | — | — |
sylius/resource-bundle Version ^1.12 | — | — |
symfony/framework-bundle Version ^6.4.1 || ^7.4 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.