Tests, release notes, and organizational backing provide useful transparency. The repository is not archived and dependencies are limited, but security documentation is absent and ongoing maintenance is uncertain.
52%
Total Score
100
100
63
50
Only two releases were published, with the latest about 8 years ago and no releases in the last 12 months. This is strong evidence of stalled maintenance, although the repository remains available and organization-backed.
The repository is not archived, which preserves a path for maintenance, but its last push was about 4 years ago. That inactivity reinforces the release-history concern.
The linked repository has no security policy. This does not prove a security problem, but it reduces transparency for reporting and handling vulnerabilities.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
spryker/search Version ^8.0.0 | — | — |
fond-of-spryker/product-attribute-expander Version ^1.1.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.