The package includes tests, a usable README, and release notes for this version. Maintenance activity is currently quiet, while workflow references are entirely unpinned and one action comes from an archived repository.
65%
Total Score
75
100
94
75
The repository recorded zero commits and zero active maintainers in the last three months, which is a meaningful maintenance concern even though a recent release exists.
No security policy is present in the repository, leaving vulnerability-reporting expectations unclear for a package used in ecommerce applications.
The release is marked stable and not a prerelease, but the reported latest registry version is 4.2.0 while the assessed release is v5.0.2, creating a small consistency concern.
All 11 action references are unpinned, and a high-confidence medium-severity finding identifies an archived action; the low-confidence cache findings are hygiene concerns rather than decisive risks.
We didn't find any vulnerabilities for this package.
No maintainer information available.
| Dependency | Last Release | Score |
|---|---|---|
psr/log Version ^3.0 | — | — |
twig/twig Version ^2.0 || ^3.0 | — | — |
doctrine/orm Version ^2.18 || ^3.5 | — | — |
symfony/form Version ^6.4 || ^7.3 | — | — |
doctrine/dbal Version ^2.7 || ^3.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.