spryker-shop/b2c-demo-marketplace
Recent releases and 66 commits from nine contributors show active ownership. The organization-backed repository includes tests, release notes, and security scanning, while its large dependency surface adds integration overhead.
78%
Total Score
100
50
100
75
Health Score Breakdown
The package declares 318 runtime dependencies, creating substantial upgrade and integration overhead for adopters, although that breadth is consistent with a full demo marketplace application.
No repository security policy was found, leaving vulnerability-reporting guidance unclear despite the presence of automated security scanning.
All 10 workflows were analyzed, but 30 of 32 action references are unpinned, including a high-confidence high-severity unpinned container image; high-confidence secrets-inherit findings also broaden credential exposure. These are meaningful workflow supply-chain hygiene risks, though no untrusted checkout or script-injection paths were found.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
No maintainer information available.
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 spryker/uuid Version ^1.0.1 | — | — |
galbar/jsonpath Version ^1.3.1 | — | — |
spryker/sitemap Version ^1.0.0 | — | — |
spryker/tax-app Version ^0.4.3 | — | — |
spryker/chart-gui Version ^1.1.2 | — | — |
Weekly Downloads
Info
- Last Published
- 1 month ago
- Created
- 5 years ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.