Package Health

spryker/code-it-now

The package includes tests, changelog, release notes, and an active organization-owned repository. Its last registry release was over four years ago, and the project points users to a replacement package.

Latest 1.1.1PackagistPackagist

20%

Total Score

Maintainer Stability
Maintainer Stability
Assesses the consistency and reliability of package maintainers

75

Dependencies
Dependencies
Evaluates the health and security of package dependencies

100

Maturity
Maturity
Indicates package age, release frequency, and adoption metrics

67

Supply Chain
Supply Chain
Evaluates supply chain security practices and risks

75

Using this package? Scan for Free

Health Score Breakdown

Registry deprecationdanger

Packagist marks the entire package as abandoned and names spryker/barcode-laminas as its replacement. This is a severe adoption risk even though the repository remains available.

Release historydanger

The package has had no registry release in over four years and none in the last 12 months. Its short history of four releases does not compensate for the prolonged release gap.

Repo commit activitycaution

There were no commits and no active maintainers in the three months measured. The recent repository push provides some broader project activity, but this release's current maintenance activity is still weak.

Security policycaution

The repository has no security policy. This is a transparency and maintenance gap, though it is secondary to the package being abandoned.

Workflow auditcaution

The single workflow was fully analyzed with no detected sinks or audit findings, but all four action references are unpinned. Missing top-level permissions is acceptable on its own, while unpinned actions remain a modest reproducibility concern.

Vulnerabilities

We didn't find any vulnerabilities for this package.

Package versions

Maintainers

No maintainer information available.

Direct Dependencies

DependencyLast ReleaseScore
laminas/laminas-barcode
Version ^2.8.0
spryker/barcode-extension
Version ^1.0.0

Weekly Downloads

Info

Last Published
4 years ago
Created
8 years ago

Are You Affected?

Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.

Free. No credit card required.

Aikido Platform