The repository has tests, release notes, and five active contributors, while the package is licensed and not deprecated. Workflow auditing found no high-risk issues, though no security policy is published.
80%
Total Score
100
100
83
88
The package has only three releases and none in the last 12 months, with a median interval of about 3.5 years; this indicates a slow release cadence, though recent repository activity provides compensation.
The repository has no stars or forks and six watchers; this offers little adoption evidence, but popularity is supporting evidence and does not outweigh the active maintenance signals.
Composer build tooling is present, but no security scanning tools were detected; the absence is a modest transparency gap rather than a severe risk.
The repository has no published security policy, leaving vulnerability reporting and response expectations unclear.
We didn't find any vulnerabilities for this package.
No maintainer information available.
| Dependency | Last Release | Score |
|---|---|---|
spryker/kernel Version ^3.30.0 | — | — |
spryker/transfer Version ^3.25.0 | — | — |
spryker/cart-extension Version ^4.1.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.