spryker/merchant-category
The repository has five active maintainers and recent commits, while tests, release notes, and a license file improve transparency. A missing security policy and two unpinned workflow actions are modest hygiene concerns.
76%
Total Score
100
88
75
Health Score Breakdown
The package has seven releases since September 2020, but none in the last 12 months and its latest registry release was in May 2024. This lowers confidence in release maintenance, though recent repository activity partly compensates.
The project uses Composer for builds, but no security scanning tools were detected. The missing scanning coverage is a modest transparency gap.
No repository security policy was found. This is a maintenance and disclosure-process gap, though it is not evidence that the package is unsafe.
The only workflow was fully analyzed with no audit findings or untrusted execution paths, and it has no top-level write permissions. However, two of four action references are unpinned, creating a minor reproducibility concern.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
No maintainer information available.
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 spryker/event Version ^2.0.0 | — | — |
spryker/kernel Version ^3.33.0 | — | — |
spryker/category Version ^4.19.0 || ^5.0.0 | — | — |
spryker/merchant Version ^3.1.0 | — | — |
spryker/transfer Version ^3.25.0 | — | — |
Weekly Downloads
Info
- Last Published
- 2 years ago
- Created
- 6 years ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.