spryker/merchant-app-merchant-portal-gui

This is a healthy, actively maintained release with a stable version, recent publication, regular release history, an unarchived repository, six active contributors in the last three months, and strong package/repository scaffolding including tests, changelog, CI, and a matching source repository. The proprietary license is explicitly declared and accompanied by a license file. The main reservations are the absence of a security policy, undeclared top-level workflow token permissions, and no detected security-scanning tooling; these are transparency and CI-hardening gaps rather than evidence of abandonment. The package appears reasonable to depend on, subject to reviewing its proprietary licensing terms and organizational security practices.

Latest 2.2.0Packagist

Health Score Breakdown

Repo toolingcaution

Composer build tooling is present, but no security-scanning tools were detected. This is a modest CI hygiene gap rather than a direct indication that the package is unsafe or abandoned.

Security policycaution

No repository security policy was found, reducing transparency around vulnerability reporting and response procedures. The active organization-backed repository partly offsets the concern but does not remove it.

Token permissionscaution

The one workflow lacks top-level token permissions, and no read-only permissions are declared. Although no top-level write permissions were detected, explicit least-privilege configuration would provide stronger CI hardening.

View all 18 health checks

Vulnerabilities

We didn't find any vulnerabilities for this package.

Direct Dependencies

Dependency	Last Release	Score
spryker/kernel Version ^3.33.0	—	—
spryker/zed-ui Version ^4.3.0	—	—
spryker/symfony Version ^3.0.0	—	—
spryker/transfer Version ^3.27.0	—	—
spryker/merchant-app Version ^1.1.0	—	—

View All 7 Dependencies