spryker/product-quantity-data-import
Five contributors share recent work, and the package includes tests, release notes, and a license. Workflow auditing found no dangerous findings, but two of four actions are unpinned and no security policy is present.
70%
Total Score
100
80
75
Health Score Breakdown
The registry shows no releases in the last 12 months and lists the latest release as July 2019, which raises transparency and freshness concerns. Recent repository activity partly offsets the stale registry history.
No repository security policy was found. This is a transparency gap, although it is not by itself evidence of abandonment or unsafe code.
The assessed version is 3.0.0, while this signal reports the latest registry version as 1.2.1; that inconsistency weakens confidence in the release metadata even though the version is marked stable and not prerelease.
The single workflow was fully audited with no dangerous findings, no untrusted checkout or script injection, and no broad top-level write permissions. Two of four action references are unpinned, leaving a moderate reproducibility and supply-chain hygiene gap.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
No maintainer information available.
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 spryker/kernel Version ^3.20.0 | — | — |
spryker/product Version ^6.0.0 | — | — |
spryker/data-import Version ^1.3.0 | — | — |
spryker/product-quantity Version ^0.1.1 || ^1.0.0 || ^3.0.0 | — | — |
Weekly Downloads
Info
- Last Published
- 7 years ago
- Created
- 8 years ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.