Package Health

spryker/product-image-sets-rest-api

This is a healthy, established release with a long publication history, five releases in the last 12 months, a stable version, active recent repository commits from five maintainers, and organizational backing from Spryker. The package and repository contain coherent source structure, documentation, changelog, license files, and CI workflow, while the repository is neither archived nor mismatched with the package. The main reservations are the absence of tests and a security policy, plus a workflow without top-level token permissions; these are meaningful hygiene gaps but do not outweigh the evidence of active maintenance and maturity.

Latest 1.4.3PackagistPackagist

86%

Total Score

Maintainer Stability
Maintainer Stability
Assesses the consistency and reliability of package maintainers

88

Dependencies
Dependencies
Evaluates the health and security of package dependencies

100

Maturity
Maturity
Indicates package age, release frequency, and adoption metrics

88

Supply Chain
Supply Chain
Evaluates supply chain security practices and risks

80

Health Score Breakdown

Package scaffoldingcaution

A README and changelog are present in both the package context and repository, and the repository uses GitHub Releases. Tests are absent in both places, which is a maintenance-quality gap for a code module.

Repo issue activitycaution

There were no new or merged pull requests and no issue activity in the last month, which limits evidence of current collaboration; however, this is partly offset by recent commit activity and release history.

Repo toolingcaution

Composer build tooling is present, but no security-scanning tools were detected. The missing scanning automation is a hygiene gap, though it does not indicate abandonment.

Security policycaution

No repository security policy was found, leaving vulnerability-reporting and security-response expectations undocumented.

Token permissionscaution

The one workflow lacks top-level token permissions. No top-level write permissions were detected, but explicitly declaring least-privilege permissions would provide stronger CI security hygiene.

Vulnerabilities

We didn't find any vulnerabilities for this package.

Package versions

Maintainers

No maintainer information available.

Direct Dependencies

DependencyLast ReleaseScore
spryker/kernel
Version ^3.30.0
spryker/symfony
Version ^3.0.0
spryker/transfer
Version ^3.42.0
spryker/product-storage
Version ^1.2.0
spryker/glue-application
Version ^1.8.0

Weekly Downloads

Info

Last Published
10 days ago
Created
8 years ago

Are You Affected?

Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.

Free. No credit card required.

Aikido Platform