spryker/product-offer-prices-rest-api

This is a healthy, actively maintained release from an organization-backed project. It has a long release history, five releases in the last 12 months, a stable non-prerelease version, a current non-archived repository, recent commits from five maintainers, a moderate bus factor, matching repository identity, a license file, and no install-time lifecycle scripts. The main concerns are the absence of repository security scanning and a security policy, missing explicit workflow token permissions, and no tests in either the package artifact or repository; these reduce transparency and assurance but do not outweigh the strong maintenance and project-backing evidence.

Latest 2.6.2Packagist

Health Score Breakdown

Package scaffoldingcaution

The package includes a README and changelog, and the repository uses GitHub Releases, but neither the artifact nor repository contains tests; for an API module this is a genuine verification gap.

Repo toolingcaution

Composer build tooling is present, but no security-scanning tools were detected; the missing scanning coverage is a modest transparency and assurance gap.

Security policycaution

The repository has no security policy, leaving vulnerability-reporting and response expectations undocumented.

Token permissionscaution

The only workflow lacks top-level token permissions, so least-privilege intent is not explicitly documented even though no top-level write permissions were observed.

View all 18 health checks

Vulnerabilities

We didn't find any vulnerabilities for this package.

Direct Dependencies

Dependency	Last Release	Score
spryker/kernel Version ^3.33.0	—	—
spryker/symfony Version ^3.0.0	—	—
spryker/currency Version ^3.14.0 || ^4.0.0	—	—
spryker/transfer Version ^3.42.0	—	—
spryker/container Version ^1.10.0	—	—

View All 13 Dependencies