It has a clear license, a complete source tree, and organization backing. The unpinned CI actions and absent security policy add modest transparency and maintenance concerns.
57%
Total Score
75
100
93
67
This 495-day-old package has only one release, with no releases in the last 12 months. That is meaningful evidence of a stalled release cycle, although the stable 1.0.0 version may indicate a small, finished module.
The repository recorded no commits and had no active maintainers in the last three months. The recent repository push does not compensate for the lack of observed commit activity in that period.
The linked repository has no security policy. This reduces transparency for reporting and handling vulnerabilities, though it is a modest concern for this small module rather than evidence of abandonment by itself.
The single workflow was fully analyzed with no untrusted checkouts or audit findings, but all four action references are unpinned. This is a reproducibility and maintenance-hygiene gap rather than a severe risk on its own.
We didn't find any vulnerabilities for this package.
No maintainer information available.
| Dependency | Last Release | Score |
|---|---|---|
spryker/gui Version ^3.47.1 | — | — |
spryker/kernel Version ^3.75.0 | — | — |
spryker/locale Version ^3.8.1 | — | — |
spryker/symfony Version ^3.11.1 | — | — |
spryker/translator Version ^1.9.1 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.