spryker/currency-data-import
Five contributors made six commits in the last three months, and the package includes tests and release notes. Two of four workflow actions are unpinned, but the audit found no active workflow findings.
78%
Total Score
100
86
75
Health Score Breakdown
Only two releases exist over roughly three years, with about 925 days between releases; however, the linked repository shows recent activity, which partly offsets the slow registry cadence.
The repository has no security policy, leaving reporting and response expectations undocumented; this is a transparency gap but not evidence of abandonment.
Version 0.1.1 is not a stable major release, so its API maturity is less established than a 1.x package; it is nevertheless a normal non-prerelease version.
The single workflow was fully analyzed with no reported findings or untrusted checkout and script-injection patterns. Two of four action references are unpinned, which is a modest reproducibility concern.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
No maintainer information available.
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 spryker/store Version ^1.19.0 | — | — |
spryker/kernel Version ^3.30.0 | — | — |
spryker/currency Version ^4.0.0 | — | — |
spryker/data-import Version ^1.0.0 | — | — |
Weekly Downloads
Info
- Last Published
- 11 months ago
- Created
- 3 years ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.