sylius/user-bundle

Repo commit activitycaution

There were zero commits and zero active maintainers in the last three months, a meaningful sign of currently limited maintenance capacity; the recent push and release history partly compensate.

Repo package mentioncaution

The repository name does not match the package name and its README does not mention the package, so the linkage is less explicit; the dedicated SyliusUserBundle repository provides some contextual support.

Repo toolingcaution

Composer build tooling is present, but no security-scanning tool was detected. This is a modest transparency and hygiene gap rather than evidence that the release is unsafe.