spryker-sdk/sync-api

The package includes tests, changelog, release notes, and a matching repository with recent commits. Its organization backing and two active contributors offset the concentrated commit share; workflow pinning and the missing security policy are smaller hygiene concerns.

Latest 0.1.8

Packagist

82%

Total Score

Maintainer Stability

100

Dependencies

100

Maturity

Supply Chain

Health Score Breakdown

Release history

The package has existed for over four years and released version 0.1.8 in the last two months, but only one release appeared in the last 12 months, indicating a slower cadence.

Repo tooling

Composer build tooling is present, but no security-scanning tool was detected, leaving a modest repository hygiene gap.

Security policy

The repository has no security policy, which reduces transparency about how vulnerabilities should be reported and handled.

Version stability

Version 0.1.8 is not a prerelease, although the package remains below 1.0, so its API may still change more readily than a stable-major release.

Workflow audit

The single workflow was fully analyzed with no dangerous triggers, untrusted checkouts, or audit findings. However, all four referenced actions are unpinned, so their versions are not reproducibly fixed.

Vulnerabilities

We didn't find any vulnerabilities for this package.

Package versions

Maintainers

No maintainer information available.

Direct Dependencies

Dependency	Last Release	Score
symfony/finder Version ^4.0.0 \|\| ^5.3 \|\| ^6.0 \|\| ^7.0	—	—
symfony/console Version ^4.0.0 \|\| ^5.3 \|\| ^6.0 \|\| ^7.0	—	—
symfony/process Version ^4.0.0 \|\| ^5.4 \|\| ^6.0 \|\| ^7.0	—	—
cebe/php-openapi Version ^1.6	—	—
spryker-sdk/spryk Version ^0.4.0 \|\| ^0.5.0	—	—