spryker-shop/shop-application
Healthy and suitable to depend on. It has eight years of releases, a current stable version, active work from five contributors, and complete package and repository documentation; the main caveats are no security policy and unspecified workflow token permissions.
88%
Total Score
88
100
94
80
Health Score Breakdown
There were no new or closed issues in the last month and no pull requests were merged, so recent issue-management evidence is limited; this is tempered by active commits and a recent release.
Composer build tooling is present, but no security scanning tools were detected. This is a modest transparency gap rather than a severe risk because the repository has CI and active maintenance.
No repository security policy was found, leaving vulnerability-reporting expectations undocumented.
The only workflow lacks top-level token permissions. No write permissions were observed, but explicitly constrained permissions would provide stronger CI hardening.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
No maintainer information available.
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 spryker/twig Version ^3.3.0 | — | — |
spryker/kernel Version ^3.48.0 | — | — |
spryker/locale Version ^3.8.0 || ^4.0.0 | — | — |
spryker/storage Version ^3.4.0 | — | — |
spryker/symfony Version ^3.5.0 | — | — |
Weekly Downloads
Info
- Last Published
- 7 days ago
- Created
- 8 years ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.