spryker/product-management
The package includes tests, a changelog, and release notes for this version. It has no security policy, and two of four workflow actions are unpinned, leaving modest maintenance and build-reproducibility gaps.
87%
Total Score
100
50
94
75
Health Score Breakdown
The module declares 31 runtime dependencies, a broad integration surface for a product-management component. The dependencies are largely related Spryker modules, which provides some context but does not remove upgrade coupling.
Composer build tooling is present, but no security-scanning tool was detected. The missing scanner is a modest process gap, not evidence of abandonment.
The repository has no security policy. This reduces transparency about vulnerability reporting and response, though active releases and organizational ownership partly compensate.
All workflows were analyzed with no reported audit findings, no untrusted checkouts, and no script injection. However, two of four action references are unpinned, which weakens build reproducibility.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
No maintainer information available.
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 spryker/gui Version ^4.1.0 || ^5.8.0 | — | — |
spryker/tax Version ^4.0.0 || ^5.0.0 | — | — |
spryker/twig Version ^3.16.0 | — | — |
spryker/money Version ^2.4.0 | — | — |
spryker/price Version ^5.0.0 | — | — |
Weekly Downloads
Info
- Last Published
- 6 days ago
- Created
- 9 years ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.