spryker/product-prices-rest-api
This is a healthy, mature release from an organization-backed project: it has been published since 2018, received seven releases in the last 12 months, is stable and not deprecated, and the repository was recently updated rather than archived. Recent activity is distributed across five maintainers, with no severe contributor concentration, and the package has coherent source structure, documentation, changelog coverage, licensing, and no install-time lifecycle scripts. The main concerns are the absence of repository tests, security scanning, a security policy, and explicit workflow token permissions; these are meaningful transparency and defense-in-depth gaps, but the active release cadence and organization ownership reduce abandonment risk.
88%
Total Score
100
100
83
80
Health Score Breakdown
The artifact has a README and changelog, and the repository also uses GitHub Releases; tests are absent in both places, which is a maintenance-quality gap for an API module.
The repository has zero stars and forks and six watchers. This is weak supporting popularity evidence, but popularity is not decisive and the package has stronger release and activity evidence.
Composer build tooling is present, but no security-scanning tools were detected, leaving a defense-in-depth gap in the repository workflow.
No repository security policy was found, reducing transparency about vulnerability reporting and response procedures.
The sole workflow lacks top-level token permissions. No write permissions were explicitly declared, but the absence of an explicit restrictive policy is a workflow-hardening gap.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
No maintainer information available.
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 spryker/price Version ^5.0.0 | — | — |
spryker/store Version ^1.4.0 | — | — |
spryker/kernel Version ^3.30.0 | — | — |
spryker/symfony Version ^3.0.0 | — | — |
spryker/currency Version ^3.14.0 || ^4.0.0 | — | — |
Weekly Downloads
Info
- Last Published
- 15 days ago
- Created
- 8 years ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.