The package is licensed, has tests, and comes from a matching organization repository. Pin this version carefully because maintenance evidence is limited and its workflow uses unpinned actions.
58%
Total Score
75
88
75
This is the only release, published nearly three years ago, with no releases in the last 12 months. That leaves little evidence of ongoing maintenance.
There were no commits and no active maintainers in the last three months. Combined with the single-release history, this suggests limited current maintenance capacity.
The repository uses Make and Composer build tooling, which supports a reproducible project structure, but it has no reported security scanning.
The sole workflow was fully analyzed with no dangerous findings, but all 3 of its action references are unpinned. That is a supply-chain hygiene weakness, not a severe risk by itself.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
spryker/company Version ^1.4.0 | — | — |
spryker/company-user Version ^2.3.0 | — | — |
fond-of-impala/company-price-list Version ^1.0.0 | — | — |
fond-of-oryx/company-users-rest-api-extension Version ^2.2.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.