spryker/country
spryker/country 4.9.0 appears to be a healthy, actively maintained dependency. It has a long release history since 2016, a current stable release, recent publishing activity, no registry deprecation, an unarchived organization-owned repository, recent commits from five maintainers, and substantial package and repository scaffolding including tests, changelog, license, and CI configuration. The main reservations are the absence of a repository security policy, missing top-level workflow token permissions, and no automated security-scanning tool detected; these are meaningful repository-hygiene gaps but do not outweigh the evidence of ongoing maintenance and project backing.
88%
Total Score
88
100
94
80
Health Score Breakdown
There were no new or merged pull requests in the last month, and issue counts are unavailable. This is limited recent collaboration evidence, but the absence of activity over one month is not sufficient to establish abandonment.
The repository uses Composer build tooling, but no security-scanning tools were detected. The build setup is present, while security-tooling coverage is a hygiene gap.
No repository security policy was found. This reduces vulnerability-reporting transparency, although it is a process gap rather than evidence of abandonment.
The repository's only workflow lacks top-level token permissions, so its effective permission scope is not explicitly constrained at the workflow level. No workflow requests top-level write access, but explicit least-privilege declarations would be stronger.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
No maintainer information available.
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 spryker/gui Version ^3.0.0 || ^4.0.0 || ^5.0.0 | — | — |
spryker/store Version ^1.19.0 | — | — |
spryker/kernel Version ^3.30.0 | — | — |
spryker/symfony Version ^3.0.0 | — | — |
spryker/transfer Version ^3.27.0 | — | — |
Weekly Downloads
Info
- Last Published
- 17 days ago
- Created
- 10 years ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.