spryker/comment-merchant-portal-gui

This is a healthy, actively maintained release from an organization-backed repository. The package is stable, not deprecated, recently updated, has a matching repository with a documented package reference, and shows five commits from five contributors in the last three months, indicating good maintenance distribution. The artifact includes a README, changelog, license file, and substantial source tree, with no install-time lifecycle scripts or dangerous workflow patterns. The main reservations are the absence of repository tests, lack of a security policy, and no top-level GitHub Actions token-permission declaration; these are transparency and CI-hardening gaps, but they do not outweigh the strong evidence of active organizational maintenance.

Latest 2.1.0Packagist

Health Score Breakdown

Package scaffoldingcaution

A README and changelog are present and the repository uses GitHub Releases, but neither the artifact nor repository contains tests. The missing tests are a modest maintenance-confidence gap for a substantial module.

Repo toolingcaution

Composer build tooling is present, but no security-scanning tool was detected. This is a CI hygiene gap, though other workflow signals show no dangerous patterns.

Security policycaution

The repository has no security policy. This reduces vulnerability-reporting transparency, although it is not evidence that the package is unmaintained.

Token permissionscaution

The single workflow lacks a top-level token-permissions declaration and does not explicitly declare read-only permissions. This weakens CI least-privilege hygiene, despite no top-level write permissions being observed.

View all 18 health checks

Vulnerabilities

We didn't find any vulnerabilities for this package.

Direct Dependencies

Dependency	Last Release	Score
spryker/kernel Version ^3.30.0	—	—
spryker/zed-ui Version ^4.3.0	—	—
spryker/comment Version ^1.4.0	—	—
spryker/symfony Version ^3.0.0	—	—
spryker/transfer Version ^3.27.0	—	—

View All 8 Dependencies