The repository is clearly tied to the package and has useful installation documentation, with organizational ownership providing some continuity. Its single release, no releases in the last 12 months, no recent commits, absent security policy, and unpinned workflow actions leave maintenance and build hygiene concerns.
62%
Total Score
75
100
88
67
This package has had only one release, published 485 days ago, with no releases in the last 12 months; that is a meaningful maintenance concern for a dependency.
There were zero commits and zero active maintainers in the last three months, which weakens evidence of ongoing maintenance; the recent repository push provides only limited compensation.
Composer is used for the build, but no security-scanning tool is configured, leaving a modest project-hygiene gap.
The repository has no security policy, reducing transparency about vulnerability reporting and response.
The workflow audit completed successfully with no dangerous triggers, untrusted checkouts, or audit findings. However, all four action references are unpinned, which is a build-integrity hygiene concern, while the missing top-level permissions block is acceptable on its own.
We didn't find any vulnerabilities for this package.
No maintainer information available.
| Dependency | Last Release | Score |
|---|---|---|
spryker-demo/frontend-configurator Version ^1.0.0 | — | — |
spryker-demo/frontend-configurator-gui Version ^1.0.0 | — | — |
spryker-demo/frontend-configurator-widget Version ^1.0.0 | — | — |
spryker-demo/frontend-configurator-storage Version ^1.0.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.