It has a matching organizational repository, tests, and a clear MIT license. The workflow uses unpinned actions and the project lacks a security policy, adding smaller upkeep concerns.
45%
Total Score
75
90
67
The package has had no release in more than three years and no releases in the last 12 months. Its earlier releases were regular, but the prolonged halt materially increases abandonment risk.
The repository recorded zero commits and zero active maintainers in the last three months, consistent with the release pause and limited evidence of ongoing maintenance.
The repository has no security policy, reducing transparency about vulnerability reporting and response. This is a secondary concern because the repository is otherwise present and maintained under an organization.
All three analyzed action references are unpinned, so workflow dependencies can change without a reviewed package change. The audit found no dangerous triggers, untrusted checkouts, script injection, or high-severity findings.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
spryker/mail Version ^4.0.0 | — | — |
fond-of-oryx/customer-registration-extension Version ^2.0.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.