vanssa/borica-sylius-plugin

Release historydanger

The latest release was in April 2021, with no releases in the following 12 months and only six releases across more than six years. This is strong evidence of abandonment risk for a payment integration.

Repo commit activitydanger

There were no commits and no active maintainers in the last three months, consistent with the multi-year release gap and indicating that maintenance capacity is currently absent.

Package scaffoldingcaution

A README, tests, and a GitHub release for this version provide useful adoption and verification material. However, the release notes say “WIP” and the README lists unfinished documentation and cleanup tasks, limiting transparency.

Repo toolingcaution

Composer build tooling is present, but no security-scanning tools were detected. This is a hygiene gap, though it is less significant than the maintenance concerns.

Security policycaution

The repository has no security policy, leaving no documented channel or process for reporting security issues in a payment-related plugin.