spryker/multi-factor-auth-merchant-portal

This is a healthy, actively maintained release from an organization-backed repository. It has a stable 2.4.0 release, seven releases in the last 12 months, recent repository activity with six contributors, matching repository identity, tests, changelog, license file, and no install-time lifecycle scripts or registry deprecation. The main cautions are that the repository has no declared security scanning, no security policy, and its CI workflow lacks top-level token permissions; these reduce transparency and workflow hardening but do not outweigh the strong maintenance and packaging evidence.

Latest 2.4.0Packagist

Health checks

Repo toolingcaution

Composer build tooling is present, but no security-scanning tools were detected. The missing scanning is a transparency and hygiene gap, though it is partly mitigated by the presence of CI and other repository tooling.

Security policycaution

The repository has no SECURITY.md or other declared security policy, which leaves vulnerability-reporting and security-maintenance expectations less transparent.

Token permissionscaution

The one CI workflow lacks top-level token permissions and does not declare read-only permissions. Although no write permissions were detected, explicit least-privilege configuration would provide stronger CI hardening.

View all 19 health checks

Vulnerabilities

We didn't find any vulnerabilities for this package.

Direct Dependencies

Dependency	Last Release	Score
spryker/user Version ^3.27.0	—	—
spryker/kernel Version ^3.52.0	—	—
spryker/router Version ^1.15.0	—	—
spryker/zed-ui Version ^4.3.0	—	—
spryker/session Version ^4.0.0	—	—

View All 12 Dependencies