spryker/asset
The repository had five commits from five maintainers in the last three months, with tests, a changelog, and release notes for this version. Two of four workflow actions are unpinned and no security policy is present, but organization backing limits the concern.
78%
Total Score
100
93
83
Health Score Breakdown
The package has 14 releases over roughly four years, but none in the last 12 months and its latest registry release was about 13 months ago. This indicates slower delivery, though recent repository activity provides some compensation.
The repository has no security policy, leaving vulnerability reporting and response expectations undocumented. This is a transparency gap, but it is moderated by the active, organization-owned project.
The single workflow was fully analyzed with no injection or high-severity findings, and it has no top-level write permissions; however, two of four action references are unpinned, creating a modest reproducibility and supply-chain hygiene concern.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
No maintainer information available.
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 spryker/event Version ^2.1.0 | — | — |
spryker/store Version ^1.16.0 | — | — |
spryker/kernel Version ^3.30.0 | — | — |
spryker/transfer Version ^3.27.0 | — | — |
spryker/propel-orm Version ^1.0.0 | — | — |
Weekly Downloads
Info
- Last Published
- 1 year ago
- Created
- 4 years ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.