webgriffe/sylius-table-rate-shipping-plugin
The project has tests, a clear README, and a stable release history, with organizational backing and a recent release. It lacks a security policy, and all nine workflow actions are unpinned, adding maintenance and build-integrity concerns.
68%
Total Score
75
100
100
50
Health Score Breakdown
Post-install and post-update scripts run automatically; the README specifically tells users to install with --no-scripts because the automatic cache-clear step can fail, creating installation friction.
The repository recorded zero commits and zero active maintainers in the last three months, which is a meaningful maintenance concern even though the release history shows a recent version.
The linked repository has no security policy, reducing transparency for reporting and handling vulnerabilities in a package used in shipping and checkout flows.
All 9 analyzed action references are unpinned, which weakens build reproducibility. The reported cache-poisoning findings have low confidence and therefore remain hygiene concerns rather than severe evidence; the audit itself was complete.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
No maintainer information available.
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 sylius/sylius Version ^2.0 | — | — |
Weekly Downloads
Info
- Last Published
- 6 months ago
- Created
- 7 years ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.