sylius/order-bundle

This is a mature, actively released MIT-licensed package with 318 releases over more than 12 years, a stable non-prerelease version, an unarchived organization-owned repository, and a repository security policy. The main concerns are that the linked repository shows no commits or pull requests in the last three months, has no detected security-scanning tooling, and does not explicitly mention this package in its README; these reduce confidence in current maintenance and repository association, though the package artifact is substantial and repository tests compensate for the absence of packaged tests.

Latest v2.2.9

Packagist

66%

Total Score

Maintainer Stability

Dependencies

100

Maturity

Supply Chain

100

Health Score Breakdown

Repo commit activity

There were 0 commits and 0 active maintainers in the last 3 months, which is a meaningful current-maintenance concern despite the strong historical release record and recent repository push timestamp.

Repo issue activity

There were no new or closed issues or pull requests and no merged pull requests in the last month; this is consistent with low current development activity, although the open-issue count is unknown.

Repo package mention

The repository name does not exactly match the package name and its README does not mention the package, creating a caution that the repository association may be indirect; the dedicated SyliusOrderBundle repository name makes the mismatch less severe than an unrelated popular-project repository.

Repo tooling

Composer build tooling is present, but no security-scanning tools were detected. This is a genuine supply-chain hygiene gap, though it is not by itself evidence that the package is unsafe.

Vulnerabilities

We didn't find any vulnerabilities for this package.

Package versions

Maintainers

Paweł Jędrzejewski

Sylius project

Community contributions

Direct Dependencies

Dependency	Last Release	Score
sylius/order Version ^2.0	—	—
sylius/money-bundle Version ^2.0	—	—
sylius/resource-bundle Version ^1.12	—	—
symfony/framework-bundle Version ^6.4.1 \|\| ^7.4	—	—
symfony/service-contracts Version ^3.5	—	—