This is a mature, licensed, non-deprecated package with a long release history, 319 releases over more than 13 years, a stable current major version, and a substantial implementation with repository tests. The Sylius organization backs the linked repository and a recent release indicates the package is still distributed, but the absence of commits and active maintainers during the last 3 months is a meaningful maintenance concern. Repository/package identity evidence is also imperfect, and the repository has no security-scanning tooling, so adoption is reasonable with monitoring but not risk-free.
68%
Total Score
75
100
89
100
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
symfony/clock Version ^6.4 || ^7.4 | — | — |
sylius/registry Version ^1.6 | — | — |
sylius/promotion Version ^2.0 | — | — |
sylius/money-bundle Version ^2.0 | — | — |
sylius/resource-bundle Version ^1.12 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.