fond-of-oryx/cart-search-rest-api-extension
The package is MIT-licensed, has a small dependency surface, and is not deprecated or archived. Its workflow is fully audited but uses three unpinned actions, leaving maintenance and build reproducibility concerns.
58%
Total Score
50
67
50
Health Score Breakdown
The repository contains tests, which supports basic project maturity, but the published package has no README for consumers of this library. The missing documentation is a minor integration and transparency gap.
Only three releases have been published, and the latest was about three years ago; there were no releases in the last 12 months. This is meaningful evidence of a slowing or inactive maintenance cycle.
The repository recorded zero commits and zero active maintainers in the last three months, despite being unarchived. That weakens confidence in ongoing maintenance.
The repository has no security policy. This does not show a security defect, but it reduces transparency about how vulnerabilities are reported and handled.
The single workflow was completely analyzed with no dangerous triggers, sinks, or audit findings. However, all three referenced actions are unpinned, which creates a modest build-reproducibility and workflow supply-chain hygiene concern.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
 Daniel Rose |
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 spryker/glue-application Version ^1.0.0 | — | — |
Weekly Downloads
Info
- Last Published
- 3 years ago
- Created
- 4 years ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.