Package Health

spryker-feature/marketplace-merchant-product-offer-service-points-availability

Documentation and packaging are straightforward, and the project has continued releasing. All four workflow actions are unpinned, while recent commits come from one contributor; organizational ownership helps, but maintenance remains concentrated.

Latest 202608.0PackagistPackagist

72%

Total Score

Maintainer Stability
Maintainer Stability
Assesses the consistency and reliability of package maintainers

67

Maturity
Maturity
Indicates package age, release frequency, and adoption metrics

100

Supply Chain
Supply Chain
Evaluates supply chain security practices and risks

50

Health Score Breakdown

Repo bus factorcaution

One contributor, the release bot, accounts for all recent commits, creating concentrated maintenance capacity; organization ownership provides some handoff potential but does not show a second active contributor.

Repo commit activitycaution

Only 2 commits were recorded in the last 3 months, so recent maintenance activity is light; the current release provides some compensating evidence of ongoing work.

Security policycaution

The repository has no published security policy, leaving vulnerability-reporting expectations unclear; this is a transparency gap, not evidence of an active security problem.

Workflow auditcaution

The single workflow was fully analyzed with no dangerous triggers, untrusted checkouts, or audit findings, but all 4 action references are unpinned, weakening build reproducibility and supply-chain hygiene.

Vulnerabilities

We didn't find any vulnerabilities for this package.

Package versions

Maintainers

No maintainer information available.

Direct Dependencies

DependencyLast ReleaseScore
spryker/merchant-product-offer-service-point-availability
Version ^0.3.0
—
—
spryker-shop/merchant-product-offer-service-point-availability-widget
Version ^0.3.0
—
—

Weekly Downloads

Info

Last Published
1 month ago
Created
2 years ago

Are You Affected?

Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.

Free. No credit card required.

Aikido Platform