Package Health

spryker-demo/import-process-google-sheets-gui

Unpinned workflow actions and no security policy reduce transparency, though the repository is clearly structured and backed by an organization. The package includes a README, changelog, license, and stable 1.0.0 metadata.

Latest 1.0.0PackagistPackagist

62%

Total Score

Maintainer Stability
Maintainer Stability
Assesses the consistency and reliability of package maintainers

75

Maturity
Maturity
Indicates package age, release frequency, and adoption metrics

93

Supply Chain
Supply Chain
Evaluates supply chain security practices and risks

83

Health Score Breakdown

Release historycaution

The package has only one release, 1.0.0, published about 357 days ago, so there is little release history to demonstrate sustained maintenance.

Repo commit activitycaution

The repository recorded 0 commits and 0 active maintainers in the last three months, which weakens evidence of ongoing maintenance despite the repository not being archived.

Security policycaution

No repository security policy was found, reducing transparency for reporting and handling vulnerabilities.

Workflow auditcaution

The single workflow was fully analyzed with no high-confidence audit findings or untrusted triggers, but all 4 action references are unpinned, leaving avoidable build-reproducibility risk.

Vulnerabilities

We didn't find any vulnerabilities for this package.

Package versions

Maintainers

No maintainer information available.

Direct Dependencies

DependencyLast ReleaseScore
spryker/gui
Version ^3.47.1
—
—
spryker/kernel
Version ^3.75.0
—
—
spryker/symfony
Version ^3.11.1
—
—
google/apiclient
Version ^2.14.0
—
—
spryker/util-text
Version ^1.5.1
—
—

Weekly Downloads

Info

Last Published
1 year ago
Created
1 year ago

Are You Affected?

Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.

Free. No credit card required.

Aikido Platform