xrow/sylius-bundle

The package has a valid MIT license and a matching, organization-owned repository, but its maintenance has effectively stopped. Its minimal README and lack of security tooling add transparency concerns for a library last updated about 10 years ago.

Latest 1.0

Packagist

35%

Total Score

Maintainer Stability

Maturity

Supply Chain

Health Score Breakdown

Release history

There has been only one release, published about 10 years and 10 months ago, with no releases in the last 12 months. This is strong evidence that the package is no longer maintained.

Repo commit activity

The repository recorded zero commits and zero active maintainers in the last 3 months, consistent with its last push being about 10 years ago. No provided signal shows ongoing maintenance.

Package scaffolding

The artifact includes a README, but it is only 16 characters long and the project has no tests or changelog. Missing tests and changelog are normal for published artifacts, while the extremely limited consumer documentation is a minor concern.

Repo tooling

Composer is used for the build, which fits the ecosystem, but no security scanning tools were detected. This is a hygiene gap that compounds the lack of recent maintenance.

Security policy

The repository has no security policy. That limits transparency around vulnerability reporting, although it is secondary to the much older maintenance record.