Package Health

spryker/oauth-customer-validation

The repository remains active with five contributors sharing recent commits, and the organization backing reduces abandonment risk. There is no security policy, and two of four workflow actions are unpinned, leaving modest maintenance and build-integrity gaps.

Latest 1.0.0PackagistPackagist

68%

Total Score

Maintainer Stability
Maintainer Stability
Assesses the consistency and reliability of package maintainers

100

Dependencies
Dependencies
Evaluates the health and security of package dependencies

100

Maturity
Maturity
Indicates package age, release frequency, and adoption metrics

88

Supply Chain
Supply Chain
Evaluates supply chain security practices and risks

75

Health Score Breakdown

Release historycaution

This is the only release, published about 3 years and 7 months ago, with no releases in the last 12 months. Recent repository work partly offsets the stale registry cadence but does not establish ongoing package publishing.

Repo toolingcaution

Composer build tooling is present, but no security-scanning tools were detected. This is a modest transparency gap rather than evidence of unsafe code.

Security policycaution

The repository has no security policy, leaving disclosure and response expectations undocumented for a security-sensitive authentication-related module.

Workflow auditcaution

The single workflow was fully analyzed with no dangerous triggers, untrusted checkouts, script injection, or audit findings. However, two of four action references are unpinned, so build inputs are not fully reproducible.

Vulnerabilities

We didn't find any vulnerabilities for this package.

Package versions

Maintainers

No maintainer information available.

Direct Dependencies

DependencyLast ReleaseScore
spryker/oauth
Version ^2.8.0
spryker/kernel
Version ^3.30.0
spryker/transfer
Version ^3.27.0
spryker/util-encoding
Version ^2.0.0
spryker/oauth-extension
Version ^1.8.0

Weekly Downloads

Info

Last Published
3 years ago
Created
3 years ago

Are You Affected?

Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.

Free. No credit card required.

Aikido Platform