The package includes tests, a README, an MIT license, and a source repository that clearly matches the package. Its release and commit activity has gone quiet, while all three workflow actions are unpinned and no security policy is present.
58%
Total Score
75
90
100
Only three releases were published, all around January 2024, with no releases in the following 12 months; the package has had no release for about 2 years and 8 months.
The repository recorded zero commits and zero active maintainers in the last three months, indicating no current maintenance activity. This is partly offset by a push in January 2025, but activity is still stale by the collection date.
The single workflow was fully analyzed with no dangerous findings, but all 3 of 3 action references are unpinned. The workflow has no top-level permissions block, which is acceptable on its own, so the main issue is reproducibility and action supply-chain hygiene.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
spryker/propel Version * | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.