fond-of-oryx/glue-application-acl
The package includes tests, a declared MIT license, and a matching organization-owned repository with no archive or deprecation flag. Its latest published release is old, while recent commit activity is absent, so maintenance should be verified before upgrading.
62%
Total Score
75
100
88
75
Health Score Breakdown
Only two releases exist, and the latest was published over three years ago with no releases in the last 12 months. This is a meaningful maintenance concern, although the repository is not archived.
There were no commits and no active maintainers in the last three months, weakening confidence that current issues or compatibility changes will be addressed promptly.
The repository uses Make and Composer build tooling, but no security scanning tools were detected. The build support is positive; the missing scanning is a modest hygiene gap.
No repository security policy was found, which leaves vulnerability reporting expectations unclear for dependents.
The only workflow lacks top-level token permissions. Although no write permission was observed, explicit least-privilege settings would provide stronger workflow hygiene.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
 Daniel Rose |
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 spryker/glue-application Version ^1.35.0 | — | — |
spryker/glue-application-extension Version ^1.5.0 | — | — |
Weekly Downloads
Info
- Last Published
- 3 years ago
- Created
- 4 years ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.