spryker/cart-note-product-bundle-connector
Healthy and suitable to depend on. It has a long release history, a current release, recent work from five contributors, and organization-backed source; the main caveats are missing repository security controls and tests.
82%
Total Score
100
100
88
80
Health Score Breakdown
The artifact includes a README and changelog, and the repository uses GitHub Releases, but neither the package nor repository contains tests. That is a maintenance and verification gap for a reusable library.
Composer build tooling is present, but no security-scanning tool was detected. The missing scanning is a modest transparency and maintenance concern.
The repository has no security policy. This does not show abandonment, but it leaves vulnerability reporting and response expectations undocumented.
The only workflow lacks top-level token permissions and does not explicitly declare read-only permissions. No write permissions were observed, but explicit least-privilege configuration would be clearer.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
No maintainer information available.
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 spryker/kernel Version ^3.33.0 | — | — |
spryker/symfony Version ^3.0.0 | — | — |
spryker/product-bundle Version ^4.5.0 || ^6.0.0 || ^7.0.0 | — | — |
spryker/cart-note-extension Version ^1.0.0 | — | — |
Weekly Downloads
Info
- Last Published
- 12 days ago
- Created
- 8 years ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.