fond-of-impala/collaborative-cart
Tests, a matching repository, and an MIT license provide useful safeguards. The long release gap, absent recent commits, and unpinned workflow actions leave meaningful maintenance and build-reproducibility concerns.
47%
Total Score
50
83
67
Health Score Breakdown
This is the package's only release, published in January 2024, with no releases in the last 12 months. That long gap raises abandonment risk despite the stable 1.0.0 version.
The repository recorded zero commits and zero active maintainers in the past three months. Combined with the old release, this suggests maintenance has substantially slowed.
The repository has no security policy. This is a transparency and maintenance gap, although the package's matching repository, tests, and clear license provide some compensating project evidence.
All three analyzed workflow action references are unpinned, reducing build reproducibility and increasing exposure to action changes. The audit found no dangerous triggers, sinks, or high-confidence security findings, which limits the impact to caution.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
 Daniel Rose |
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 spryker/quote Version ^2.0.0 | — | — |
spryker/customer Version ^7.0.0 | — | — |
spryker/permission Version ^1.0.0 | — | — |
spryker/company-user Version ^2.0.0 | — | — |
spryker/quote-extension Version ^1.0.0 | — | — |
Weekly Downloads
Info
- Last Published
- 2 years ago
- Created
- 2 years ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.