spryker-eco/heidelpay
The module is licensed, tested, documented, and maintained under an organization-owned project. Its workflow uses three unpinned actions and recent commit activity is absent, so maintenance and build reproducibility need attention.
58%
Total Score
75
92
Health Score Breakdown
The package has 19 releases, but its latest release was in December 2021 and it had no releases in the last 12 months. This is a meaningful maintenance concern, although the repository is not archived and was pushed in October 2024.
The repository recorded zero commits and zero active maintainers during the last 3 months. That indicates limited current maintenance capacity, despite the project's longer history and organizational ownership.
All three analyzed action references are unpinned, reducing build reproducibility. The audit found no untrusted checkouts, script injection, high-severity findings, or workflows with top-level write permissions, which keeps this as a hygiene concern rather than a severe risk.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
No maintainer information available.
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 spryker/oms Version ^7.0.0 || ^8.0.0 || ^10.0.0 || ^11.0.0 | — | — |
spryker/money Version ^2.0.0 | — | — |
spryker/quote Version ^1.0.0 || ^2.0.0 | — | — |
spryker/sales Version ^5.0.0 || ^6.0.0 || ^7.0.0 || ^8.0.0 || ^10.0.0 || ^11.0.0 | — | — |
spryker/kernel Version ^3.30.0 | — | — |
Weekly Downloads
Info
- Last Published
- 4 years ago
- Created
- 8 years ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.