Clear documentation, tests, and release notes make adoption easier. The project is backed by an organization, and its workflow audit found no dangerous patterns; its missing security policy is a minor transparency gap.
86%
Total Score
100
100
89
83
The repository has no stars and one fork, so public adoption evidence is limited. This is only a supporting gap and is outweighed by recent multi-contributor activity and organization backing.
Composer build tooling is present, but no security-scanning tools were detected. The missing scanner is a modest process gap, not evidence of unsafe code by itself.
The repository has no security policy, reducing transparency about vulnerability reporting and response. This is a minor concern because the project is actively maintained and organization-backed.
We didn't find any vulnerabilities for this package.
No maintainer information available.
| Dependency | Last Release | Score |
|---|---|---|
spryker/kernel Version ^3.30.0 | — | — |
spryker/company Version ^1.0.0 | — | — |
spryker/data-import Version ^1.2.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.