The package includes tests, release notes, and a clear license file. Organization backing and five recent contributors reduce abandonment concerns; two of four workflow actions remain unpinned.
76%
Total Score
100
88
75
The package has had no registry release in the last 12 months, and its latest release was in May 2024, which is a maintenance caution. Recent repository activity provides meaningful evidence that development continues.
Composer build tooling is present, but no repository security-scanning tool was detected. This is a minor process gap rather than evidence of unsafe maintenance.
The repository has no published security policy, leaving vulnerability-reporting and response expectations unclear.
The workflow audit completed cleanly with no injection or high-confidence findings, but two of four action references are unpinned. The lack of a top-level permissions block is acceptable here because it is not paired with untrusted workflow triggers or sinks.
We didn't find any vulnerabilities for this package.
No maintainer information available.
| Dependency | Last Release | Score |
|---|---|---|
spryker/kernel Version ^3.30.0 | — | — |
spryker/content Version ^2.1.0 | — | — |
spryker/data-import Version ^1.3.0 | — | — |
spryker/util-encoding Version ^2.0.0 | — | — |
spryker/content-banner Version ^1.1.0 || ^2.0.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.