The organization-backed repository includes broad source coverage and tests, with a matching package name and a valid MIT license. Release and commit activity has stalled, while the workflow leaves all three actions unpinned and the repository has no security policy.
62%
Total Score
75
50
88
83
The package has eight runtime dependencies, including its extension and related Spryker components; this is a moderately coupled profile that warrants normal dependency maintenance but is not excessive on its own.
The package has 15 releases since October 2021, but none in the last 12 months; its latest release was in April 2024, more than two years ago. This is a meaningful maintenance concern despite the earlier regular cadence.
The repository recorded zero commits and zero active maintainers in the last three months. Together with the old registry release, this indicates currently stalled maintenance.
The repository uses Make and Composer build tooling, but no security scanning tools were detected. The missing scanning is a hygiene gap rather than evidence that the release is unsafe.
No repository security policy was found, reducing transparency about vulnerability reporting and response expectations.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
spryker/company-role Version ^1.0.0 | — | — |
spryker/company-user Version ^2.0.0 | — | — |
spryker/uuid-behavior Version ^1.0.0 | — | — |
spryker/glossary-storage Version ^1.5.0 | — | — |
spryker/glue-application Version ^1.0.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.