vldmr-k/sylius-viewed-products-plugin
The package includes a clear README, tests, and configured build and security tooling. Its workflow leaves all seven actions unpinned, while the low-confidence cache findings are a smaller hygiene concern.
55%
Total Score
50
86
50
Health Score Breakdown
Only two releases were published, both in October 2023, with no releases in the last 12 months; nearly three years without a new release raises abandonment risk.
The repository recorded zero commits and zero active maintainers in the last three months, consistent with the long release gap and indicating limited current maintenance.
The repository has 0 stars, 0 forks, and 1 watcher. Popularity is only supporting evidence, but these very low counters provide little evidence of a broad maintenance or user community.
No security policy was found in the repository, leaving vulnerability-reporting expectations undocumented; this is a transparency gap rather than evidence of an unsafe release.
All seven analyzed action references are unpinned, which weakens build reproducibility. The cache-poisoning findings have low confidence and no untrusted trigger or checkout sink was observed, so they remain a smaller hygiene concern.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
No maintainer information available.
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 sylius/sylius Version ^1.12 | — | — |
sylius/mailer-bundle Version ^1.8 || ^2.0@beta | — | — |
symfony/webpack-encore-bundle Version ^1.15 | — | — |
Weekly Downloads
Info
- Last Published
- 2 years ago
- Created
- 2 years ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.