waaz/sylius-dpd-plugin

This is a usable, transparently packaged Symfony/Sylius plugin with a stable 1.3 release, five releases in the last 12 months, an active non-archived organization-owned repository, source and artifact tests, and build/security tooling. The main concern is that the repository reports no commits or active maintainers in the last three months despite the recent registry release, while very low popularity, absent security policy, and unspecified workflow token permissions reduce confidence in long-term maintenance and repository hygiene. It is reasonable to adopt with normal dependency monitoring, but it does not present the depth of maintenance evidence expected for a highly critical dependency.

Latest 1.3

Packagist

72%

Total Score

Maintainer Stability

Dependencies

Maturity

Supply Chain

Health Score Breakdown

Dependency profile

The package has 7 runtime dependencies, including core Sylius, Symfony, and shipping integrations. This is a meaningful integration surface to maintain, but it is proportionate to the plugin's stated shipping-label functionality.

Lifecycle scripts

The package declares post-create, post-install, and post-update Composer scripts. These add installation-time behavior and therefore warrant review by consumers, although the signal alone does not establish a severe health risk.

Repo commit activity

The repository reports 0 commits and 0 active maintainers in the last 3 months. This conflicts with the recent release history and is the strongest maintenance concern, suggesting that ongoing source-level activity may be concentrated or paused.

Repo issue activity

There are no open issues or pull requests and no issue or pull-request activity in the last month. This is neutral for a small stable project, but it offers little evidence of an active support community.

Repo popularity

The repository has only 2 stars, 0 forks, and 2 watchers. Low popularity is not disqualifying for a specialized plugin, but it provides little external evidence of broad adoption or community resilience.

Vulnerabilities

We didn't find any vulnerabilities for this package.

Package versions

Maintainers

No maintainer information available.

Direct Dependencies

Dependency	Last Release	Score
ekyna/dpd Version ^1.3	—	—
nyholm/psr7 Version ^1.8	—	—
sylius/sylius Version ^1.11	—	—
symfony/http-client Version ^5.4 \|\| ^6.0	—	—
bitbag/shipping-export-plugin Version ^3.0	—	—