Package Health/spryker-shop/company-page

spryker-shop/company-page

The repository is actively maintained by several contributors, with tests, release notes, and a clear package structure. Basic security hygiene is incomplete because no security policy or scanning tool is reported, and two of four workflow actions are unpinned.

Latest 2.38.1

Packagist

86%

Total Score

Maintainer Stability

100

Dependencies

100

Maturity

Supply Chain

Are you affected? Scan for Free

Health Score Breakdown

Repo popularity

The repository has 0 stars and 2 forks, offering little popularity evidence; this is only a supporting weakness because maintenance and release activity are strong.

Repo tooling

Composer build tooling is present, but no security scanning tools are reported. That leaves a modest transparency and preventive-hygiene gap.

Security policy

No repository security policy is reported, making vulnerability reporting and response expectations less transparent.

Workflow audit

The single workflow was fully analyzed with no detected injection or high-confidence audit findings, and it has no top-level write permissions. However, 2 of 4 action references are unpinned, leaving some workflow supply-chain hygiene risk.

Vulnerabilities

Title	Versions	Severity
AIKIDO-2025-10203 Pre-CVE Found by Aikido Intel before public disclosure or CVE publication. spryker-shop/company-page is vulnerable to Broken Access Control in versions 0.0.1 - 2.35.0.	0.0.1 - 2.35.0	Critical
AIKIDO-2025-10202 Pre-CVE Found by Aikido Intel before public disclosure or CVE publication. spryker-shop/company-page is vulnerable to Missing Authorization in versions 2.24.0 - 2.34.0.	2.24.0 - 2.34.0	Medium

Package versions

Maintainers

No maintainer information available.

Direct Dependencies

Dependency	Last Release	Score
spryker/store Version ^1.4.0	—	—
spryker/kernel Version ^3.52.0	—	—
spryker/locale Version ^3.0.0 \|\| ^4.0.0	—	—
spryker/router Version ^1.6.0	—	—
spryker/company Version ^1.0.0	—	—