fond-of-oryx/erp-order-page-search
The clear MIT licensing, substantial tests, and repository that matches the package support adoption; unpinned workflow actions and no security policy reduce confidence. Pin a maintained version if future releases remain absent.
64%
Total Score
75
88
83
Health Score Breakdown
The package has 30 releases over roughly five years, but its latest release was in September 2024 and there were no releases in the following 12 months, indicating a prolonged maintenance pause.
The repository had no commits and no active maintainers in the three months before collection, which weakens evidence of current maintenance capacity.
The project uses Composer and Make, but no security-scanning tooling was detected; this is a modest transparency and maintenance-process gap.
No repository security policy was found, leaving vulnerability reporting and response expectations undocumented.
The single workflow was fully analyzed with no dangerous triggers, untrusted checkouts, script injection, or audit findings. However, all 3 action references are unpinned, which leaves the build exposed to changes in referenced actions.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
 József Geng |
| Julian Hyatt |
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 spryker/search Version ^8.0.0 | — | — |
spryker/customer Version ^7.0.0 | — | — |
fond-of-oryx/erp-order Version ^4.4.0 | — | — |
spryker/event-behavior Version ^1.0.0 | — | — |
spryker/synchronization Version ^1.0.0 | — | — |
Weekly Downloads
Info
- Last Published
- 2 years ago
- Created
- 5 years ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.