Package Health/synolia/sylius-gdpr-plugin

synolia/sylius-gdpr-plugin

The package has a clear license, documentation, repository tests, and a stable major release from an organization-owned project. Maintenance has gone quiet since April 2025, and all nine workflow action references are unpinned; the missing security policy adds a smaller transparency gap.

Latest v2.0.0

Packagist

62%

Total Score

Maintainer Stability

Dependencies

100

Maturity

Supply Chain

Health Score Breakdown

Repo commit activity

There were zero commits and zero active maintainers in the last three months, reinforcing the release-history evidence that current maintenance has stalled.

Lifecycle scripts

Composer install, update, and project-creation scripts run during lifecycle events. This is an operational consideration, but it is not by itself evidence of abandonment or poor maintenance.

Release history

The package has 13 releases over roughly five years, but it has had no registry release in the last 12 months and the latest release was in April 2025, indicating a prolonged maintenance gap.

Repo issue activity

Only one issue is open and there were no new or closed issues or pull requests in the last month. This is consistent with limited current activity but is not severe on its own.

Security policy

The repository has no SECURITY policy. This lowers vulnerability-reporting transparency, though it is a smaller concern than the observed maintenance slowdown.

Vulnerabilities

We didn't find any vulnerabilities for this package.

Package versions

Maintainers

No maintainer information available.

Direct Dependencies

Dependency	Last Release	Score
sylius/sylius Version ^2.0	—	—
symfony/property-info Version ^6.4\|^7.0	—	—
php-http/message-factory Version ^1.1	—	—
phpdocumentor/reflection-docblock Version ^5.3	—	—