Documentation and release notes are present, and installation has no lifecycle scripts. The workflow has two unpinned actions and the repository lacks a security policy, but these are modest hygiene concerns.
80%
Total Score
100
93
67
Composer build tooling is present, but no security-scanning tool was detected, leaving a modest assurance gap.
No repository security policy was found, reducing transparency about vulnerability reporting and response.
The workflow audit completed cleanly with no injection or high-severity findings, but 2 of 4 action references are unpinned, creating a modest reproducibility concern.
We didn't find any vulnerabilities for this package.
No maintainer information available.
| Dependency | Last Release | Score |
|---|---|---|
spryker/kernel Version ^3.30.0 | — | — |
spryker/locale Version ^1.0.0 || ^2.0.0 || ^3.0.0 || ^4.0.0 | — | — |
spryker/cms-slot-extension Version ^1.0.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.